Organisationsmiragemirage-crypto504e34 ()(lower-bound)

(lower-bound)

Logs

Show full logs
2025-07-01 15:09.40: New job: test mirage/mirage-crypto https://github.com/mirage/mirage-crypto.git#refs/pull/260/head (504e34792e402acb149ad046dfdf3c33ff43e1b6) (linux-x86_64:(lower-bound))
Base: ocaml/opam:debian-12-ocaml-4.14@sha256:fce20b65df3420e55e551e5e511d6e043f8c2fab25d7bc07171e2995fe38adc1
Opam project build

To reproduce locally:

git clone --recursive "https://github.com/mirage/mirage-crypto.git" && cd "mirage-crypto" && git fetch origin "refs/pull/260/head" && git reset --hard 504e3479
cat > Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-12-ocaml-4.14@sha256:fce20b65df3420e55e551e5e511d6e043f8c2fab25d7bc07171e2995fe38adc1
# debian-12-4.14_opam-2.3
USER 1000:1000
ENV CLICOLOR_FORCE="1"
ENV OPAMCOLOR="always"
WORKDIR /src
RUN sudo ln -f /usr/bin/opam-2.3 /usr/bin/opam
RUN opam init --reinit -ni
RUN uname -rs && opam exec -- ocaml -version && opam --version
WORKDIR /src
RUN sudo chown opam /src
RUN cd ~/opam-repository && (git cat-file -e 2ca36230be22748ea153057760524e23defe5fc7 || git fetch origin master) && git reset -q --hard 2ca36230be22748ea153057760524e23defe5fc7 && git log --no-decorate -n1 --oneline && opam update -u
COPY --chown=1000:1000 mirage-crypto.opam mirage-crypto-rng.opam mirage-crypto-rng-mirage.opam mirage-crypto-rng-miou-unix.opam mirage-crypto-pk.opam mirage-crypto-ec.opam ./
RUN opam pin add -yn mirage-crypto.dev './' && \
    opam pin add -yn mirage-crypto-rng.dev './' && \
    opam pin add -yn mirage-crypto-rng-mirage.dev './' && \
    opam pin add -yn mirage-crypto-rng-miou-unix.dev './' && \
    opam pin add -yn mirage-crypto-pk.dev './' && \
    opam pin add -yn mirage-crypto-ec.dev './'
RUN echo '(lang dune 3.0)' > './dune-project'
ENV DEPS="alcotest.1.0.1 asn1-combinators.0.3.1 astring.0.8.5 base.v0.14.2 base-bigarray.base base-bytes.base base-threads.base base-unix.base biniou.1.2.0 cmdliner.1.3.0 conf-gmp.1 conf-gmp-powm-sec.1 conf-which.1 cppo.1.6.1 cstruct.3.3.0 digestif.1.3.0 domain-name.0.3.0 dune.2.9.3 dune-configurator.2.5.1 dune-private-libs.2.5.1 duration.0.2.1 easy-format.1.0.1 eqaf.0.8 fmt.0.8.8 functoria-runtime.4.0.0 ipaddr.5.6.0 jbuilder.1.0+beta20.1 logs.0.7.0 lwt.5.4.0 macaddr.5.6.0 mirage-mtime.5.0.0 mirage-runtime.4.0.0 mirage-sleep.4.0.0 mirage-unix.5.0.1 mmap.1.1.0 mtime.2.1.0 num.1.5 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-compiler-libs.v0.11.0 ocaml-config.2 ocaml-options-vanilla.1 ocamlbuild.0.14.0 ocamlfind.1.9.1 ocplib-endian.1.0 ohex.0.2.0 ounit2.2.2.0 parsexp.v0.14.1 ppx_derivers.1.0 ppx_deriving.5.2 ppx_deriving_yojson.3.6.1 ppxlib.0.24.0 ptime.1.2.0 randomconv.0.2.0 re.1.7.2 result.1.5 seq.0.3 sexplib.v0.14.0 sexplib0.v0.14.0 stdlib-shims.0.1.0 topkg.1.0.8 uuidm.0.9.7 yojson.1.6.0 zarith.1.13"
ENV CI="true"
ENV OCAMLCI="true"
RUN opam update --depexts && opam install --cli=2.3 --depext-only -y mirage-crypto.dev mirage-crypto-rng.dev mirage-crypto-rng-mirage.dev mirage-crypto-pk.dev mirage-crypto-ec.dev $DEPS
RUN opam install $DEPS
COPY --chown=1000:1000 . /src
RUN opam exec -- dune build --only-packages=mirage-crypto,mirage-crypto-rng,mirage-crypto-rng-mirage,mirage-crypto-pk,mirage-crypto-ec @install @check @runtest && rm -rf _build

END-OF-DOCKERFILE
docker build .
END-REPRO-BLOCK

2025-07-01 15:09.40: Using cache hint "mirage/mirage-crypto-ocaml/opam:debian-12-ocaml-4.14@sha256:fce20b65df3420e55e551e5e511d6e043f8c2fab25d7bc07171e2995fe38adc1-debian-12-4.14_opam-2.3-e06d03609d7157fa309e749e583d760a"
2025-07-01 15:09.40: Using OBuilder spec:
((from ocaml/opam:debian-12-ocaml-4.14@sha256:fce20b65df3420e55e551e5e511d6e043f8c2fab25d7bc07171e2995fe38adc1)
 (comment debian-12-4.14_opam-2.3)
 (user (uid 1000) (gid 1000))
 (env CLICOLOR_FORCE 1)
 (env OPAMCOLOR always)
 (workdir /src)
 (run (shell "sudo ln -f /usr/bin/opam-2.3 /usr/bin/opam"))
 (run (shell "opam init --reinit -ni"))
 (run (shell "uname -rs && opam exec -- ocaml -version && opam --version"))
 (workdir /src)
 (run (shell "sudo chown opam /src"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell "cd ~/opam-repository && (git cat-file -e 2ca36230be22748ea153057760524e23defe5fc7 || git fetch origin master) && git reset -q --hard 2ca36230be22748ea153057760524e23defe5fc7 && git log --no-decorate -n1 --oneline && opam update -u"))
 (copy (src mirage-crypto.opam mirage-crypto-rng.opam mirage-crypto-rng-mirage.opam mirage-crypto-rng-miou-unix.opam mirage-crypto-pk.opam mirage-crypto-ec.opam)
       (dst ./))
 (run (network host)
      (shell  "opam pin add -yn mirage-crypto.dev './' && \
             \nopam pin add -yn mirage-crypto-rng.dev './' && \
             \nopam pin add -yn mirage-crypto-rng-mirage.dev './' && \
             \nopam pin add -yn mirage-crypto-rng-miou-unix.dev './' && \
             \nopam pin add -yn mirage-crypto-pk.dev './' && \
             \nopam pin add -yn mirage-crypto-ec.dev './'"))
 (run (network host)
      (shell "echo '(lang dune 3.0)' > './dune-project'"))
 (env DEPS "alcotest.1.0.1 asn1-combinators.0.3.1 astring.0.8.5 base.v0.14.2 base-bigarray.base base-bytes.base base-threads.base base-unix.base biniou.1.2.0 cmdliner.1.3.0 conf-gmp.1 conf-gmp-powm-sec.1 conf-which.1 cppo.1.6.1 cstruct.3.3.0 digestif.1.3.0 domain-name.0.3.0 dune.2.9.3 dune-configurator.2.5.1 dune-private-libs.2.5.1 duration.0.2.1 easy-format.1.0.1 eqaf.0.8 fmt.0.8.8 functoria-runtime.4.0.0 ipaddr.5.6.0 jbuilder.1.0+beta20.1 logs.0.7.0 lwt.5.4.0 macaddr.5.6.0 mirage-mtime.5.0.0 mirage-runtime.4.0.0 mirage-sleep.4.0.0 mirage-unix.5.0.1 mmap.1.1.0 mtime.2.1.0 num.1.5 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-compiler-libs.v0.11.0 ocaml-config.2 ocaml-options-vanilla.1 ocamlbuild.0.14.0 ocamlfind.1.9.1 ocplib-endian.1.0 ohex.0.2.0 ounit2.2.2.0 parsexp.v0.14.1 ppx_derivers.1.0 ppx_deriving.5.2 ppx_deriving_yojson.3.6.1 ppxlib.0.24.0 ptime.1.2.0 randomconv.0.2.0 re.1.7.2 result.1.5 seq.0.3 sexplib.v0.14.0 sexplib0.v0.14.0 stdlib-shims.0.1.0 topkg.1.0.8 uuidm.0.9.7 yojson.1.6.0 zarith.1.13")
 (env CI true)
 (env OCAMLCI true)
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell "opam update --depexts && opam install --cli=2.3 --depext-only -y mirage-crypto.dev mirage-crypto-rng.dev mirage-crypto-rng-mirage.dev mirage-crypto-pk.dev mirage-crypto-ec.dev $DEPS"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell "opam install $DEPS"))
 (copy (src .) (dst /src))
 (run (shell "opam exec -- dune build --only-packages=mirage-crypto,mirage-crypto-rng,mirage-crypto-rng-mirage,mirage-crypto-pk,mirage-crypto-ec @install @check @runtest && rm -rf _build"))
)

2025-07-01 15:09.40: Waiting for resource in pool OCluster
2025-07-01 15:09.40: Waiting for worker…
2025-07-01 15:09.41: Got resource from pool OCluster
Building on asteria.caelum.ci.dev
All commits already cached
HEAD is now at 504e347 mirage-crypto-ec: add Brainpool curves with 254/384/512 bits

(from ocaml/opam:debian-12-ocaml-4.14@sha256:fce20b65df3420e55e551e5e511d6e043f8c2fab25d7bc07171e2995fe38adc1)
2025-07-01 15:09.45 ---> using "e0b6b42c8d38d9348dfef46f8898d95202a2f66c4a54682abc09332d121e9399" from cache

/: (comment debian-12-4.14_opam-2.3)

/: (user (uid 1000) (gid 1000))

/: (env CLICOLOR_FORCE 1)

/: (env OPAMCOLOR always)

/: (workdir /src)

/src: (run (shell "sudo ln -f /usr/bin/opam-2.3 /usr/bin/opam"))
2025-07-01 15:09.45 ---> using "087e08b165a4c96e5651843463842a95f76d0840a59aa7a384c29ebd289028aa" from cache

/src: (run (shell "opam init --reinit -ni"))
Configuring from /home/opam/.opamrc and then from built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.

This development version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.

Continue? [y/n] y
[NOTE] The 'jobs' option was reset, its value was 71 and its new value will vary according to the current number of cores on your machine. You can restore the fixed value using:
           opam option jobs=71 --global
Format upgrade done.

<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2025-07-01 15:09.45 ---> using "1fc90f758c2a9c5a702116c42b73f4d00ed4c97867bb8f33e39732c915533175" from cache

/src: (run (shell "uname -rs && opam exec -- ocaml -version && opam --version"))
Linux 5.15.0-142-generic
The OCaml toplevel, version 4.14.2
2.3.0
2025-07-01 15:09.45 ---> using "907d9d16d8ee77c0c5555113122dd0c6e70daaa557fdf4c491949956707acf69" from cache

/src: (workdir /src)

/src: (run (shell "sudo chown opam /src"))
2025-07-01 15:09.45 ---> using "2d576fc7dcae21eaff29797780d6d1b4d59f570977e957d814c1084a3ed8a1f4" from cache

/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
           (network host)
           (shell "cd ~/opam-repository && (git cat-file -e 2ca36230be22748ea153057760524e23defe5fc7 || git fetch origin master) && git reset -q --hard 2ca36230be22748ea153057760524e23defe5fc7 && git log --no-decorate -n1 --oneline && opam update -u"))
From https://github.com/ocaml/opam-repository
 * branch                  master     -> FETCH_HEAD
   c7269f729a..84d2c8f5ca  master     -> origin/master
2ca36230be Merge pull request #28098 from smuenzel/num-not-5.4

<><> Updating package repositories ><><><><><><><><><><><><><><><><><><><><><><>
[default] synchronised from git+file:///home/opam/opam-repository

Everything as up-to-date as possible (run with --verbose to show unavailable upgrades).
However, you may "opam upgrade" these packages explicitly, which will ask permission to downgrade or uninstall the conflicting packages.
Nothing to do.
# To update the current shell environment, run: eval $(opam env)
2025-07-01 15:09.45 ---> using "ca6c17c9cda6400b72089c121661196b58d86f4f6096038219cf610c6118012d" from cache

/src: (copy (src mirage-crypto.opam mirage-crypto-rng.opam mirage-crypto-rng-mirage.opam mirage-crypto-rng-miou-unix.opam mirage-crypto-pk.opam mirage-crypto-ec.opam)
            (dst ./))
2025-07-01 15:09.45 ---> using "e04c159a65e0d5d71d6158e91829b7c1bad13e40c2bfad2dad5e928028563513" from cache

/src: (run (network host)
           (shell  "opam pin add -yn mirage-crypto.dev './' && \
                  \nopam pin add -yn mirage-crypto-rng.dev './' && \
                  \nopam pin add -yn mirage-crypto-rng-mirage.dev './' && \
                  \nopam pin add -yn mirage-crypto-rng-miou-unix.dev './' && \
                  \nopam pin add -yn mirage-crypto-pk.dev './' && \
                  \nopam pin add -yn mirage-crypto-ec.dev './'"))
[mirage-crypto.dev] synchronised (file:///src)
mirage-crypto is now pinned to file:///src (version dev)
[mirage-crypto-rng.dev] synchronised (file:///src)
mirage-crypto-rng is now pinned to file:///src (version dev)
[mirage-crypto-rng-mirage.dev] synchronised (file:///src)
mirage-crypto-rng-mirage is now pinned to file:///src (version dev)
[mirage-crypto-rng-miou-unix.dev] synchronised (file:///src)
mirage-crypto-rng-miou-unix is now pinned to file:///src (version dev)
[mirage-crypto-pk.dev] synchronised (file:///src)
mirage-crypto-pk is now pinned to file:///src (version dev)
[mirage-crypto-ec.dev] synchronised (file:///src)
mirage-crypto-ec is now pinned to file:///src (version dev)
2025-07-01 15:09.45 ---> using "1c9227482351c1baeebe2935715f8c5c45578a8a9dd637859666fb9c02d51c0f" from cache

/src: (run (network host)
           (shell "echo '(lang dune 3.0)' > './dune-project'"))
2025-07-01 15:09.45 ---> using "b04f11f66a79c573cdda4909dc2e7c1359adbf26ac2e3b6454a1cbba1cc4703d" from cache

/src: (env DEPS "alcotest.1.0.1 asn1-combinators.0.3.1 astring.0.8.5 base.v0.14.2 base-bigarray.base base-bytes.base base-threads.base base-unix.base biniou.1.2.0 cmdliner.1.3.0 conf-gmp.1 conf-gmp-powm-sec.1 conf-which.1 cppo.1.6.1 cstruct.3.3.0 digestif.1.3.0 domain-name.0.3.0 dune.2.9.3 dune-configurator.2.5.1 dune-private-libs.2.5.1 duration.0.2.1 easy-format.1.0.1 eqaf.0.8 fmt.0.8.8 functoria-runtime.4.0.0 ipaddr.5.6.0 jbuilder.1.0+beta20.1 logs.0.7.0 lwt.5.4.0 macaddr.5.6.0 mirage-mtime.5.0.0 mirage-runtime.4.0.0 mirage-sleep.4.0.0 mirage-unix.5.0.1 mmap.1.1.0 mtime.2.1.0 num.1.5 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-compiler-libs.v0.11.0 ocaml-config.2 ocaml-options-vanilla.1 ocamlbuild.0.14.0 ocamlfind.1.9.1 ocplib-endian.1.0 ohex.0.2.0 ounit2.2.2.0 parsexp.v0.14.1 ppx_derivers.1.0 ppx_deriving.5.2 ppx_deriving_yojson.3.6.1 ppxlib.0.24.0 ptime.1.2.0 randomconv.0.2.0 re.1.7.2 result.1.5 seq.0.3 sexplib.v0.14.0 sexplib0.v0.14.0 stdlib-shims.0.1.0 topkg.1.0.8 uuidm.0.9.7 yojson.1.6.0 zarith.1.13")

/src: (env CI true)

/src: (env OCAMLCI true)

/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
           (network host)
           (shell "opam update --depexts && opam install --cli=2.3 --depext-only -y mirage-crypto.dev mirage-crypto-rng.dev mirage-crypto-rng-mirage.dev mirage-crypto-pk.dev mirage-crypto-ec.dev $DEPS"))
+ /usr/bin/sudo "apt-get" "update"
- Hit:1 http://deb.debian.org/debian bookworm InRelease
- Get:2 http://deb.debian.org/debian bookworm-updates InRelease [55.4 kB]
- Get:3 http://deb.debian.org/debian-security bookworm-security InRelease [48.0 kB]
- Get:4 http://deb.debian.org/debian-security bookworm-security/main amd64 Packages [270 kB]
- Fetched 373 kB in 0s (1137 kB/s)
- Reading package lists...

<><> Synchronising pinned packages ><><><><><><><><><><><><><><><><><><><><><><>
[mirage-crypto.dev] synchronised (file:///src)
[mirage-crypto-ec.dev] synchronised (file:///src)
[mirage-crypto-pk.dev] synchronised (file:///src)
[mirage-crypto-rng.dev] synchronised (file:///src)
[mirage-crypto-rng-mirage.dev] synchronised (file:///src)

[NOTE] Package ocaml-options-vanilla is already installed (current version is 1).
[NOTE] Package ocaml-config is already installed (current version is 2).
[NOTE] Package ocaml-base-compiler is already installed (current version is 4.14.2).
[NOTE] Package ocaml is already installed (current version is 4.14.2).
[NOTE] Package base-unix is already installed (current version is base).
[NOTE] Package base-threads is already installed (current version is base).
[NOTE] Package base-bigarray is already installed (current version is base).

The following system packages will first need to be installed:
    libgmp-dev

<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>

+ /usr/bin/sudo "apt-get" "install" "-qq" "-yy" "libgmp-dev"
- debconf: delaying package configuration, since apt-utils is not installed
- Selecting previously unselected package libgmpxx4ldbl:amd64.
- (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 18747 files and directories currently installed.)
- Preparing to unpack .../libgmpxx4ldbl_2%3a6.2.1+dfsg1-1.1_amd64.deb ...
- Unpacking libgmpxx4ldbl:amd64 (2:6.2.1+dfsg1-1.1) ...
- Selecting previously unselected package libgmp-dev:amd64.
- Preparing to unpack .../libgmp-dev_2%3a6.2.1+dfsg1-1.1_amd64.deb ...
- Unpacking libgmp-dev:amd64 (2:6.2.1+dfsg1-1.1) ...
- Setting up libgmpxx4ldbl:amd64 (2:6.2.1+dfsg1-1.1) ...
- Setting up libgmp-dev:amd64 (2:6.2.1+dfsg1-1.1) ...
- Processing triggers for libc-bin (2.36-9+deb12u10) ...
2025-07-01 15:09.45 ---> using "335907b91a29ba32fcd1e692fa66c59da1395d0c2ab972ae00c502445c21eac5" from cache

/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
           (network host)
           (shell "opam install $DEPS"))
[NOTE] Package ocaml-options-vanilla is already installed (current version is 1).
[NOTE] Package ocaml-config is already installed (current version is 2).
[NOTE] Package ocaml-base-compiler is already installed (current version is 4.14.2).
[NOTE] Package ocaml is already installed (current version is 4.14.2).
[NOTE] Package base-unix is already installed (current version is base).
[NOTE] Package base-threads is already installed (current version is base).
[NOTE] Package base-bigarray is already installed (current version is base).
The following actions will be performed:
=== install 57 packages
  - install alcotest            1.0.1
  - install asn1-combinators    0.3.1
  - install astring             0.8.5
  - install base                v0.14.2
  - install base-bytes          base
  - install biniou              1.2.0
  - install cmdliner            1.3.0
  - install conf-gmp            1
  - install conf-gmp-powm-sec   1
  - install conf-which          1
  - install cppo                1.6.1
  - install cstruct             3.3.0
  - install digestif            1.3.0
  - install domain-name         0.3.0
  - install dune                2.9.3
  - install dune-configurator   2.5.1
  - install dune-private-libs   2.5.1
  - install duration            0.2.1
  - install easy-format         1.0.1
  - install eqaf                0.8
  - install fmt                 0.8.8
  - install functoria-runtime   4.0.0 (deprecated)
  - install ipaddr              5.6.0
  - install jbuilder            1.0+beta20.1 (deprecated)
  - install logs                0.7.0
  - install lwt                 5.4.0
  - install macaddr             5.6.0
  - install mirage-mtime        5.0.0
  - install mirage-runtime      4.0.0
  - install mirage-sleep        4.0.0
  - install mirage-unix         5.0.1
  - install mmap                1.1.0
  - install mtime               2.1.0
  - install num                 1.5
  - install ocaml-compiler-libs v0.11.0
  - install ocamlbuild          0.14.0
  - install ocamlfind           1.9.1
  - install ocplib-endian       1.0
  - install ohex                0.2.0
  - install ounit2              2.2.0
  - install parsexp             v0.14.1
  - install ppx_derivers        1.0
  - install ppx_deriving        5.2
  - install ppx_deriving_yojson 3.6.1
  - install ppxlib              0.24.0
  - install ptime               1.2.0
  - install randomconv          0.2.0
  - install re                  1.7.2
  - install result              1.5
  - install seq                 0.3
  - install sexplib             v0.14.0
  - install sexplib0            v0.14.0
  - install stdlib-shims        0.1.0
  - install topkg               1.0.8
  - install uuidm               0.9.7
  - install yojson              1.6.0
  - install zarith              1.13

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved asn1-combinators.0.3.1  (cached)
-> retrieved astring.0.8.5  (cached)
-> retrieved biniou.1.2.0  (cached)
-> retrieved cmdliner.1.3.0  (cached)
-> retrieved conf-gmp.1  (cached)
-> retrieved conf-gmp-powm-sec.1  (cached)
-> retrieved cppo.1.6.1  (cached)
-> installed conf-which.1
-> installed conf-gmp.1
-> installed conf-gmp-powm-sec.1
-> retrieved base.v0.14.2  (https://opam.ocaml.org/cache)
-> retrieved cstruct.3.3.0  (https://opam.ocaml.org/cache)
-> retrieved domain-name.0.3.0  (cached)
-> retrieved alcotest.1.0.1  (https://opam.ocaml.org/cache)
-> retrieved digestif.1.3.0  (cached)
-> retrieved dune.2.9.3  (cached)
-> retrieved dune-configurator.2.5.1, dune-private-libs.2.5.1  (cached)
-> retrieved duration.0.2.1  (cached)
-> retrieved easy-format.1.0.1  (cached)
-> retrieved eqaf.0.8  (cached)
-> retrieved fmt.0.8.8  (cached)
-> retrieved ipaddr.5.6.0, macaddr.5.6.0  (cached)
-> retrieved functoria-runtime.4.0.0, mirage-runtime.4.0.0  (cached)
-> retrieved jbuilder.1.0+beta20.1  (cached)
-> retrieved logs.0.7.0  (cached)
-> retrieved lwt.5.4.0  (cached)
-> installed cmdliner.1.3.0
-> retrieved mirage-mtime.5.0.0  (cached)
-> retrieved mirage-sleep.4.0.0  (cached)
-> retrieved mirage-unix.5.0.1  (cached)
-> retrieved mtime.2.1.0  (cached)
-> retrieved num.1.5  (cached)
-> retrieved ocaml-compiler-libs.v0.11.0  (cached)
-> retrieved ocamlbuild.0.14.0  (cached)
-> retrieved ocamlfind.1.9.1  (cached)
-> retrieved ocplib-endian.1.0  (cached)
-> retrieved mmap.1.1.0  (https://opam.ocaml.org/cache)
-> retrieved ohex.0.2.0  (cached)
-> retrieved ppx_derivers.1.0  (cached)
-> retrieved ppx_deriving.5.2  (cached)
-> retrieved parsexp.v0.14.1  (https://opam.ocaml.org/cache)
-> retrieved ounit2.2.2.0  (https://opam.ocaml.org/cache)
-> retrieved ptime.1.2.0  (cached)
-> retrieved ppx_deriving_yojson.3.6.1  (https://opam.ocaml.org/cache)
-> retrieved randomconv.0.2.0  (cached)
-> retrieved result.1.5  (cached)
-> retrieved re.1.7.2  (cached)
-> retrieved seq.0.3  (cached)
-> retrieved sexplib0.v0.14.0  (cached)
-> retrieved stdlib-shims.0.1.0  (cached)
-> retrieved ppxlib.0.24.0  (cached)
-> retrieved topkg.1.0.8  (cached)
-> retrieved sexplib.v0.14.0  (https://opam.ocaml.org/cache)
-> retrieved zarith.1.13  (cached)
-> retrieved uuidm.0.9.7  (https://opam.ocaml.org/cache)
-> retrieved yojson.1.6.0  (https://opam.ocaml.org/cache)
-> installed num.1.5
-> installed ocamlfind.1.9.1
-> installed base-bytes.base
-> installed easy-format.1.0.1
-> installed ocamlbuild.0.14.0
-> installed zarith.1.13
-> installed dune.2.9.3
-> installed jbuilder.1.0+beta20.1
-> installed randomconv.0.2.0
-> installed duration.0.2.1
-> installed ohex.0.2.0
-> installed stdlib-shims.0.1.0
-> installed seq.0.3
-> installed mmap.1.1.0
-> installed ppx_derivers.1.0
-> installed macaddr.5.6.0
-> installed result.1.5
-> installed sexplib0.v0.14.0
-> installed biniou.1.2.0
-> installed cppo.1.6.1
-> installed re.1.7.2
-> installed ocaml-compiler-libs.v0.11.0
-> installed ounit2.2.2.0
-> installed yojson.1.6.0
-> installed topkg.1.0.8
-> installed uuidm.0.9.7
-> installed dune-private-libs.2.5.1
-> installed astring.0.8.5
-> installed fmt.0.8.8
-> installed mtime.2.1.0
-> installed ptime.1.2.0
-> installed functoria-runtime.4.0.0
-> installed domain-name.0.3.0
-> installed mirage-mtime.5.0.0
-> installed ocplib-endian.1.0
-> installed alcotest.1.0.1
-> installed asn1-combinators.0.3.1
-> installed dune-configurator.2.5.1
-> installed ipaddr.5.6.0
-> installed lwt.5.4.0
-> installed mirage-sleep.4.0.0
-> installed logs.0.7.0
-> installed mirage-runtime.4.0.0
-> installed mirage-unix.5.0.1
-> installed ppxlib.0.24.0
-> installed base.v0.14.2
-> installed parsexp.v0.14.1
-> installed ppx_deriving.5.2
-> installed sexplib.v0.14.0
-> installed cstruct.3.3.0
-> installed eqaf.0.8
-> installed ppx_deriving_yojson.3.6.1
-> installed digestif.1.3.0
Done.

<><> jbuilder.1.0+beta20.1 installed successfully <><><><><><><><><><><><><><><>
=> Note: This package is deprecated.

<><> functoria-runtime.4.0.0 installed successfully <><><><><><><><><><><><><><>
=> Note: This package is deprecated.
# To update the current shell environment, run: eval $(opam env)
2025-07-01 15:09.45 ---> using "c6fa206104cd906c80859019ec260ae78eaf309b5a9da9d24684b4338b862f8e" from cache

/src: (copy (src .) (dst /src))
2025-07-01 15:09.45 ---> saved as "4b8e4cf801a3e745932c34ab23441b436dd1e466d27dbd40cebd25995692c17e"

/src: (run (shell "opam exec -- dune build --only-packages=mirage-crypto,mirage-crypto-rng,mirage-crypto-rng-mirage,mirage-crypto-pk,mirage-crypto-ec @install @check @runtest && rm -rf _build"))
File "/home/opam/.opam/4.14/lib/biniou/biniou.dune", line 1, characters 0-0:
Warning: .dune files are ignored since 2.0. Reinstall the library with dune
>= 2.0 to get rid of this warning and enable support for the subsystem this
library provides.
File "/home/opam/.opam/4.14/lib/ppx_derivers/ppx_derivers.dune", line 1, characters 0-0:
Warning: .dune files are ignored since 2.0. Reinstall the library with dune
>= 2.0 to get rid of this warning and enable support for the subsystem this
library provides.
File "/home/opam/.opam/4.14/lib/ocaml-compiler-libs/bytecomp/ocaml-compiler-libs.bytecomp.dune", line 1, characters 0-0:
Warning: .dune files are ignored since 2.0. Reinstall the library with dune
>= 2.0 to get rid of this warning and enable support for the subsystem this
library provides.
File "/home/opam/.opam/4.14/lib/ocaml-compiler-libs/common/ocaml-compiler-libs.common.dune", line 1, characters 0-0:
Warning: .dune files are ignored since 2.0. Reinstall the library with dune
>= 2.0 to get rid of this warning and enable support for the subsystem this
library provides.
File "/home/opam/.opam/4.14/lib/ocaml-compiler-libs/shadow/ocaml-compiler-libs.shadow.dune", line 1, characters 0-0:
Warning: .dune files are ignored since 2.0. Reinstall the library with dune
>= 2.0 to get rid of this warning and enable support for the subsystem this
library provides.
File "/home/opam/.opam/4.14/lib/ocaml-compiler-libs/toplevel/ocaml-compiler-libs.toplevel.dune", line 1, characters 0-0:
Warning: .dune files are ignored since 2.0. Reinstall the library with dune
>= 2.0 to get rid of this warning and enable support for the subsystem this
library provides.
File "/home/opam/.opam/4.14/lib/re/re.dune", line 1, characters 0-0:
Warning: .dune files are ignored since 2.0. Reinstall the library with dune
>= 2.0 to get rid of this warning and enable support for the subsystem this
library provides.
File "/home/opam/.opam/4.14/lib/re/emacs/re.emacs.dune", line 1, characters 0-0:
Warning: .dune files are ignored since 2.0. Reinstall the library with dune
>= 2.0 to get rid of this warning and enable support for the subsystem this
library provides.
File "/home/opam/.opam/4.14/lib/re/glob/re.glob.dune", line 1, characters 0-0:
Warning: .dune files are ignored since 2.0. Reinstall the library with dune
>= 2.0 to get rid of this warning and enable support for the subsystem this
library provides.
File "/home/opam/.opam/4.14/lib/re/pcre/re.pcre.dune", line 1, characters 0-0:
Warning: .dune files are ignored since 2.0. Reinstall the library with dune
>= 2.0 to get rid of this warning and enable support for the subsystem this
library provides.
File "/home/opam/.opam/4.14/lib/re/perl/re.perl.dune", line 1, characters 0-0:
Warning: .dune files are ignored since 2.0. Reinstall the library with dune
>= 2.0 to get rid of this warning and enable support for the subsystem this
library provides.
File "/home/opam/.opam/4.14/lib/re/posix/re.posix.dune", line 1, characters 0-0:
Warning: .dune files are ignored since 2.0. Reinstall the library with dune
>= 2.0 to get rid of this warning and enable support for the subsystem this
library provides.
File "/home/opam/.opam/4.14/lib/re/str/re.str.dune", line 1, characters 0-0:
Warning: .dune files are ignored since 2.0. Reinstall the library with dune
>= 2.0 to get rid of this warning and enable support for the subsystem this
library provides.
test_entropy alias tests/runtest
test entropy OK
test_random_runner alias tests/runtest
.........
Ran: 9 tests in: 0.11 seconds.
OK
test_symmetric_runner alias tests/runtest
accel: XOR AES GHASH 
................................................................
Ran: 64 tests in: 0.14 seconds.
OK
test_entropy_collection alias tests/runtest
reseeding:
000000  0008 2d4c 2a26 04ee  ceb5 0108 5163 70d8  ..-L*&......Qcp.
000010  79e2 6ea2 02c8 d82a  3442 8c4b 7a5a 0a65  y.n....*4B.KzZ.e
000020  8269 0270 8470 2c74  6475 367d 1e84 ee84  .i.p.p,tdu6}....
000030  368a b496 bca5 7caf  fcc2 a4d3 dae7 48fd  6.....|.......H.
000040  9804 0c08 8e08 e80b  a421 e22a ee3a 484b  .........!.*.:HK
000050  905d 6666 ce73 0889  ec8e 469f 74b1 aeb9  .]ff.s....F.t...
000060  20c3 98d4 0cd8 a8d8  6adc f4de 68ef 6602   .......j...h.f.
000070  ce0f 0825 ec2a 2c3b  f24c 5452 545f ea71  ...%.*,;.LTRT_.q
000080  ae7c a480 4c84 3a86  9e92 3ea1 5aa8 7caa  .|..L.:...>.Z.|.
000090  66b8 bcba 12ca a6d5  fede a6ef f603 001a  f...............
0000a0  4625 7c2c 542f ea41  ae4c a450 4c54 3a56  F%|,T/.A.L.PLT:V
0000b0  9e62 3e71 5a78 7c7a  6688 bc8a 129a a6a5  .b>qZx|zf.......
0000c0  feae a6bf f6d3 00ea  46f5 7cfc 54ff ea11  ........F.|.T...
0000d0  ae1c a420 4c24 3a26  9e32 3e41 5a48 0308  ... L$:&.2>AZH..
0000e0  a598 e740 e4bd 4717                       ...@..G.

accumulate: (src: [0] rdrand) 1a94 3438 c60c b943  
entropy sources: [0] rdrand [1] timer 
accumulate: (src: [1] timer) 4e3b afbe 
accumulate: (src: [0] rdrand) 7920 a9d2 83d3 467f  
accumulate: (src: [1] timer) 16fd 6a59 
accumulate: (src: [0] rdrand) 4818 b391 926f 7ad8  
accumulate: (src: [1] timer) 9845 45f4 
     test_ec alias tests/runtest
Testing EC.
This run has ID `718E1D52-C6BD-4E80-A156-EEBA6392EF09`.
 ...                P256 Key exchange                               0   b*A.
[OK]                P256 Key exchange                               0   b*A.
 ...                P256 Key exchange                               1   a*B.
[OK]                P256 Key exchange                               1   a*B.
 ...                P256 Key exchange                               2   a*A.
[OK]                P256 Key exchange                               2   a*A.
 ...                P256 Key exchange                               3   b*B.
[OK]                P256 Key exchange                               3   b*B.
 ...                P256 Low level scalar mult                      0   Scalar mult (#0).
[OK]                P256 Low level scalar mult                      0   Scalar mult (#0).
 ...                P256 Low level scalar mult                      1   Scalar mult (#1).
[OK]                P256 Low level scalar mult                      1   Scalar mult (#1).
 ...                P256 Low level scalar mult                      2   Scalar mult (#2).
[OK]                P256 Low level scalar mult                      2   Scalar mult (#2).
 ...                P256 Low level scalar mult                      3   Scalar mult (#3).
[OK]                P256 Low level scalar mult                      3   Scalar mult (#3).
 ...                P256 Low level scalar mult                      4   Scalar mult (#4).
[OK]                P256 Low level scalar mult                      4   Scalar mult (#4).
 ...                P256 Low level scalar mult                      5   Scalar mult (#5).
[OK]                P256 Low level scalar mult                      5   Scalar mult (#5).
 ...                P256 Point validation                           0   Ok.
[OK]                P256 Point validation                           0   Ok.
 ...                P256 Point validation                           1   P=0.
[OK]                P256 Point validation                           1   P=0.
 ...                P256 Point validation                           2   (0, sqrt(b)).
[OK]                P256 Point validation                           2   (0, sqrt(b)).
 ...                P256 Point validation                           3   out of range.
[OK]                P256 Point validation                           3   out of range.
 ...                P256 Scalar validation when generating          0   0.
[OK]                P256 Scalar validation when generating          0   0.
 ...                P256 Scalar validation when generating          1   1.
[OK]                P256 Scalar validation when generating          1   1.
 ...                P256 Scalar validation when generating          2   n-1.
[OK]                P256 Scalar validation when generating          2   n-1.
 ...                P256 Scalar validation when generating          3   n.
[OK]                P256 Scalar validation when generating          3   n.
 ...                ECDSA NIST                                      0   ECDSA gen.
[OK]                ECDSA NIST                                      0   ECDSA gen.
 ...                ECDSA NIST                                      1   ECDSA sign.
[OK]                ECDSA NIST                                      1   ECDSA sign.
 ...                ECDSA NIST                                      2   ECDSA verify.
[OK]                ECDSA NIST                                      2   ECDSA verify.
 ...                ECDSA RFC 6979 P256                             0   public key matches.
[OK]                ECDSA RFC 6979 P256                             0   public key matches.
 ...                ECDSA RFC 6979 P256                             1   public key compression and decompression.
[OK]                ECDSA RFC 6979 P256                             1   public key compression and decompression.
 ...                ECDSA RFC 6979 P256                             2   RFC 6979 A.2.5 0.
[OK]                ECDSA RFC 6979 P256                             2   RFC 6979 A.2.5 0.
 ...                ECDSA RFC 6979 P256                             3   RFC 6979 A.2.5 1.
[OK]                ECDSA RFC 6979 P256                             3   RFC 6979 A.2.5 1.
 ...                ECDSA RFC 6979 P256                             4   RFC 6979 A.2.5 2.
[OK]                ECDSA RFC 6979 P256                             4   RFC 6979 A.2.5 2.
 ...                ECDSA RFC 6979 P256                             5   RFC 6979 A.2.5 3.
[OK]                ECDSA RFC 6979 P256                             5   RFC 6979 A.2.5 3.
 ...                ECDSA RFC 6979 P256                             6   RFC 6979 A.2.5 4.
[OK]                ECDSA RFC 6979 P256                             6   RFC 6979 A.2.5 4.
 ...                ECDSA RFC 6979 P256                             7   RFC 6979 A.2.5 5.
[OK]                ECDSA RFC 6979 P256                             7   RFC 6979 A.2.5 5.
 ...                ECDSA RFC 6979 P256                             8   RFC 6979 A.2.5 6.
[OK]                ECDSA RFC 6979 P256                             8   RFC 6979 A.2.5 6.
 ...                ECDSA RFC 6979 P256                             9   RFC 6979 A.2.5 7.
[OK]                ECDSA RFC 6979 P256                             9   RFC 6979 A.2.5 7.
 ...                ECDSA RFC 6979 P256                            10   RFC 6979 A.2.5 8.
[OK]                ECDSA RFC 6979 P256                            10   RFC 6979 A.2.5 8.
 ...                ECDSA RFC 6979 P256                            11   RFC 6979 A.2.5 9.
[OK]                ECDSA RFC 6979 P256                            11   RFC 6979 A.2.5 9.
 ...                ECDSA RFC 6979 P384                             0   public key matches.
[OK]                ECDSA RFC 6979 P384                             0   public key matches.
 ...                ECDSA RFC 6979 P384                             1   public key compression and decompression.
[OK]                ECDSA RFC 6979 P384                             1   public key compression and decompression.
 ...                ECDSA RFC 6979 P384                             2   RFC 6979 A.2.6 0.
[OK]                ECDSA RFC 6979 P384                             2   RFC 6979 A.2.6 0.
 ...                ECDSA RFC 6979 P384                             3   RFC 6979 A.2.6 1.
[OK]                ECDSA RFC 6979 P384                             3   RFC 6979 A.2.6 1.
 ...                ECDSA RFC 6979 P384                             4   RFC 6979 A.2.6 2.
[OK]                ECDSA RFC 6979 P384                             4   RFC 6979 A.2.6 2.
 ...                ECDSA RFC 6979 P384                             5   RFC 6979 A.2.6 3.
[OK]                ECDSA RFC 6979 P384                             5   RFC 6979 A.2.6 3.
 ...                ECDSA RFC 6979 P384                             6   RFC 6979 A.2.6 4.
[OK]                ECDSA RFC 6979 P384                             6   RFC 6979 A.2.6 4.
 ...                ECDSA RFC 6979 P384                             7   RFC 6979 A.2.6 5.
[OK]                ECDSA RFC 6979 P384                             7   RFC 6979 A.2.6 5.
 ...                ECDSA RFC 6979 P384                             8   RFC 6979 A.2.6 6.
[OK]                ECDSA RFC 6979 P384                             8   RFC 6979 A.2.6 6.
 ...                ECDSA RFC 6979 P384                             9   RFC 6979 A.2.6 7.
[OK]                ECDSA RFC 6979 P384                             9   RFC 6979 A.2.6 7.
 ...                ECDSA RFC 6979 P384                            10   RFC 6979 A.2.6 8.
[OK]                ECDSA RFC 6979 P384                            10   RFC 6979 A.2.6 8.
 ...                ECDSA RFC 6979 P384                            11   RFC 6979 A.2.6 9.
[OK]                ECDSA RFC 6979 P384                            11   RFC 6979 A.2.6 9.
 ...                ECDSA RFC 6979 P521                             0   public key matches.
[OK]                ECDSA RFC 6979 P521                             0   public key matches.
 ...                ECDSA RFC 6979 P521                             1   public key compression and decompression.
[OK]                ECDSA RFC 6979 P521                             1   public key compression and decompression.
 ...                ECDSA RFC 6979 P521                             2   RFC 6979 A.2.7 0.
[OK]                ECDSA RFC 6979 P521                             2   RFC 6979 A.2.7 0.
 ...                ECDSA RFC 6979 P521                             3   RFC 6979 A.2.7 1.
[OK]                ECDSA RFC 6979 P521                             3   RFC 6979 A.2.7 1.
 ...                ECDSA RFC 6979 P521                             4   RFC 6979 A.2.7 2.
[OK]                ECDSA RFC 6979 P521                             4   RFC 6979 A.2.7 2.
 ...                ECDSA RFC 6979 P521                             5   RFC 6979 A.2.7 3.
[OK]                ECDSA RFC 6979 P521                             5   RFC 6979 A.2.7 3.
 ...                ECDSA RFC 6979 P521                             6   RFC 6979 A.2.7 4.
[OK]                ECDSA RFC 6979 P521                             6   RFC 6979 A.2.7 4.
 ...                ECDSA RFC 6979 P521                             7   RFC 6979 A.2.7 5.
[OK]                ECDSA RFC 6979 P521                             7   RFC 6979 A.2.7 5.
 ...                ECDSA RFC 6979 P521                             8   RFC 6979 A.2.7 6.
[OK]                ECDSA RFC 6979 P521                             8   RFC 6979 A.2.7 6.
 ...                ECDSA RFC 6979 P521                             9   RFC 6979 A.2.7 7.
[OK]                ECDSA RFC 6979 P521                             9   RFC 6979 A.2.7 7.
 ...                ECDSA RFC 6979 P521                            10   RFC 6979 A.2.7 8.
[OK]                ECDSA RFC 6979 P521                            10   RFC 6979 A.2.7 8.
 ...                ECDSA RFC 6979 P521                            11   RFC 6979 A.2.7 9.
[OK]                ECDSA RFC 6979 P521                            11   RFC 6979 A.2.7 9.
 ...                X25519                                          0   RFC 7748.
[OK]                X25519                                          0   RFC 7748.
 ...                ED25519                                         0   RFC 8032 1.
[OK]                ED25519                                         0   RFC 8032 1.
 ...                ED25519                                         1   RFC 8032 2.
[OK]                ED25519                                         1   RFC 8032 2.
 ...                ED25519                                         2   RFC 8032 3.
[OK]                ED25519                                         2   RFC 8032 3.
 ...                ED25519                                         3   RFC 8032 4.
[OK]                ED25519                                         3   RFC 8032 4.
 ...                ED25519                                         4   RFC 8032 5.
[OK]                ED25519                                         4   RFC 8032 5.
 ...                ECDSA P521 regression                           0   regression1.
[OK]                ECDSA P521 regression                           0   regression1.
 ...                secp256k1 ECDSA                                 0   ECDSA gen.
[OK]                secp256k1 ECDSA                                 0   ECDSA gen.
 ...                secp256k1 ECDSA                                 1   ECDSA verify.
[OK]                secp256k1 ECDSA                                 1   ECDSA verify.
 ...                secp256k1 ECDSA sign                            0   ECDSA sign 0.
[OK]                secp256k1 ECDSA sign                            0   ECDSA sign 0.
 ...                secp256k1 ECDSA sign                            1   ECDSA sign 1.
[OK]                secp256k1 ECDSA sign                            1   ECDSA sign 1.
 ...                secp256k1 ECDSA sign                            2   ECDSA sign 2.
[OK]                secp256k1 ECDSA sign                            2   ECDSA sign 2.
 ...                secp256k1 ECDSA sign                            3   ECDSA sign 3.
[OK]                secp256k1 ECDSA sign                            3   ECDSA sign 3.
 ...                secp256k1 ECDSA sign                            4   ECDSA sign 4.
[OK]                secp256k1 ECDSA sign                            4   ECDSA sign 4.
 ...                secp256k1 ECDSA sign                            5   ECDSA sign 5.
[OK]                secp256k1 ECDSA sign                            5   ECDSA sign 5.
 ...                secp256k1 ECDSA sign                            6   ECDSA sign 6.
[OK]                secp256k1 ECDSA sign                            6   ECDSA sign 6.
 ...                brainpoolP256r1 ECDSA                           0   ECDSA gen.
[OK]                brainpoolP256r1 ECDSA                           0   ECDSA gen.
 ...                brainpoolP256r1 ECDSA                           1   ECDSA sign.
[OK]                brainpoolP256r1 ECDSA                           1   ECDSA sign.
 ...                brainpoolP256r1 ECDSA                           2   ECDSA verify.
[OK]                brainpoolP256r1 ECDSA                           2   ECDSA verify.
 ...                brainpoolP384r1 ECDSA                           0   ECDSA gen.
[OK]                brainpoolP384r1 ECDSA                           0   ECDSA gen.
 ...                brainpoolP384r1 ECDSA                           1   ECDSA sign.
[OK]                brainpoolP384r1 ECDSA                           1   ECDSA sign.
 ...                brainpoolP384r1 ECDSA                           2   ECDSA verify.
[OK]                brainpoolP384r1 ECDSA                           2   ECDSA verify.
 ...                brainpoolP512r1 ECDSA                           0   ECDSA gen.
[OK]                brainpoolP512r1 ECDSA                           0   ECDSA gen.
 ...                brainpoolP512r1 ECDSA                           1   ECDSA sign.
[OK]                brainpoolP512r1 ECDSA                           1   ECDSA sign.
 ...                brainpoolP512r1 ECDSA                           2   ECDSA verify.
[OK]                brainpoolP512r1 ECDSA                           2   ECDSA verify.
The full test results are available in `/src/_build/default/tests/_build/_tests/718E1D52-C6BD-4E80-A156-EEBA6392EF09`.
Test Successful in 0.000s. 82 tests run.
test_pk_runner alias tests/runtest
.......................................................................................................................................................................................................................................................................................................................................................................
Ran: 359 tests in: 0.86 seconds.
OK
test_ec_wycheproof alias tests/runtest
Testing Wycheproof tests.
This run has ID `0EE35880-B5E2-47D3-9FC2-44DD5D482F19`.
 ...                ECDH P256 test vectors                               0   1 - normal case.
[OK]                ECDH P256 test vectors                               0   1 - normal case.
 ...                ECDH P256 test vectors                               1   2 - compressed public key.
[OK]                ECDH P256 test vectors                               1   2 - compressed public key.
 ...                ECDH P256 test vectors                               2   3 - edge case for shared secret.
[OK]                ECDH P256 test vectors                               2   3 - edge case for shared secret.
 ...                ECDH P256 test vectors                               3   4 - edge case for shared secret.
[OK]                ECDH P256 test vectors                               3   4 - edge case for shared secret.
 ...                ECDH P256 test vectors                               4   5 - edge case for shared secret.
[OK]                ECDH P256 test vectors                               4   5 - edge case for shared secret.
 ...                ECDH P256 test vectors                               5   6 - edge case for shared secret.
[OK]                ECDH P256 test vectors                               5   6 - edge case for shared secret.
 ...                ECDH P256 test vectors                               6   7 - edge case for shared secret.
[OK]                ECDH P256 test vectors                               6   7 - edge case for shared secret.
 ...                ECDH P256 test vectors                               7   8 - edge case for shared secret.
[OK]                ECDH P256 test vectors                               7   8 - edge case for shared secret.
 ...                ECDH P256 test vectors                               8   9 - edge case for shared secret.
[OK]                ECDH P256 test vectors                               8   9 - edge case for shared secret.
 ...                ECDH P256 test vectors                               9   10 - edge case for shared secret.
[OK]                ECDH P256 test vectors                               9   10 - edge case for shared secret.
 ...                ECDH P256 test vectors                              10   11 - edge case for shared secret.
[OK]                ECDH P256 test vectors                              10   11 - edge case for shared secret.
 ...                ECDH P256 test vectors                              11   12 - edge case for shared secret.
[OK]                ECDH P256 test vectors                              11   12 - edge case for shared secret.
 ...                ECDH P256 test vectors                              12   13 - edge case for shared secret.
[OK]                ECDH P256 test vectors                              12   13 - edge case for shared secret.
 ...                ECDH P256 test vectors                              13   14 - edge case for shared secret.
[OK]                ECDH P256 test vectors                              13   14 - edge case for shared secret.
 ...                ECDH P256 test vectors                              14   15 - edge case for shared secret.
[OK]                ECDH P256 test vectors                              14   15 - edge case for shared secret.
 ...                ECDH P256 test vectors                              15   16 - edge case for shared secret.
[OK]                ECDH P256 test vectors                              15   16 - edge case for shared secret.
 ...                ECDH P256 test vectors                              16   17 - edge case for shared secret.
[OK]                ECDH P256 test vectors                              16   17 - edge case for shared secret.
 ...                ECDH P256 test vectors                              17   18 - edge case for shared secret.
[OK]                ECDH P256 test vectors                              17   18 - edge case for shared secret.
 ...                ECDH P256 test vectors                              18   19 - y-coordinate of the public key is small.
[OK]                ECDH P256 test vectors                              18   19 - y-coordinate of the public key is small.
 ...                ECDH P256 test vectors                              19   20 - y-coordinate of the public key is small.
[OK]                ECDH P256 test vectors                              19   20 - y-coordinate of the public key is small.
 ...                ECDH P256 test vectors                              20   21 - y-coordinate of the public key is small.
[OK]                ECDH P256 test vectors                              20   21 - y-coordinate of the public key is small.
 ...                ECDH P256 test vectors                              21   22 - y-coordinate of the public key is large.
[OK]                ECDH P256 test vectors                              21   22 - y-coordinate of the public key is large.
 ...                ECDH P256 test vectors                              22   23 - y-coordinate of the public key is large.
[OK]                ECDH P256 test vectors                              22   23 - y-coordinate of the public key is large.
 ...                ECDH P256 test vectors                              23   24 - y-coordinate of the public key is large.
[OK]                ECDH P256 test vectors                              23   24 - y-coordinate of the public key is large.
 ...                ECDH P256 test vectors                              24   25 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDH P256 test vectors                              24   25 - y-coordinate of the public key has many trailing 1's.
 ...                ECDH P256 test vectors                              25   26 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDH P256 test vectors                              25   26 - y-coordinate of the public key has many trailing 1's.
 ...                ECDH P256 test vectors                              26   27 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDH P256 test vectors                              26   27 - y-coordinate of the public key has many trailing 1's.
 ...                ECDH P256 test vectors                              27   28 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDH P256 test vectors                              27   28 - y-coordinate of the public key has many trailing 0's.
 ...                ECDH P256 test vectors                              28   29 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDH P256 test vectors                              28   29 - y-coordinate of the public key has many trailing 0's.
 ...                ECDH P256 test vectors                              29   30 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDH P256 test vectors                              29   30 - y-coordinate of the public key has many trailing 0's.
 ...                ECDH P256 test vectors                              30   31 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              30   31 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              31   32 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              31   32 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              32   33 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              32   33 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              33   34 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              33   34 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              34   35 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              34   35 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              35   36 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              35   36 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              36   37 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              36   37 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              37   38 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              37   38 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              38   39 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              38   39 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              39   40 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              39   40 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              40   41 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              40   41 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              41   42 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              41   42 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              42   43 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              42   43 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              43   44 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              43   44 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              44   45 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              44   45 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              45   46 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              45   46 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              46   47 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              46   47 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              47   48 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              47   48 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              48   49 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              48   49 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              49   50 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              49   50 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              50   51 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              50   51 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              51   52 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              51   52 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              52   53 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              52   53 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              53   54 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              53   54 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              54   55 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              54   55 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              55   56 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              55   56 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              56   57 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              56   57 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              57   58 - edge cases for ephemeral key.
[OK]                ECDH P256 test vectors                              57   58 - edge cases for ephemeral key.
 ...                ECDH P256 test vectors                              58   59 - point with coordinate x = 0.
[OK]                ECDH P256 test vectors                              58   59 - point with coordinate x = 0.
 ...                ECDH P256 test vectors                              59   60 - point with coordinate x = 0.
[OK]                ECDH P256 test vectors                              59   60 - point with coordinate x = 0.
 ...                ECDH P256 test vectors                              60   61 - point with coordinate x = 0.
[OK]                ECDH P256 test vectors                              60   61 - point with coordinate x = 0.
 ...                ECDH P256 test vectors                              61   62 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              61   62 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              62   63 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              62   63 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              63   64 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              63   64 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              64   65 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              64   65 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              65   66 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              65   66 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              66   67 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              66   67 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              67   68 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              67   68 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              68   69 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              68   69 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              69   70 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              69   70 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              70   71 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              70   71 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              71   72 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              71   72 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              72   73 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              72   73 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              73   74 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              73   74 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              74   75 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              74   75 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              75   76 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              75   76 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              76   77 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P256 test vectors                              76   77 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P256 test vectors                              77   78 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                              77   78 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                              78   79 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                              78   79 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                              79   80 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                              79   80 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                              80   81 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                              80   81 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                              81   82 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                              81   82 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                              82   83 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                              82   83 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                              83   84 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P256 test vectors                              83   84 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P256 test vectors                              84   85 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P256 test vectors                              84   85 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P256 test vectors                              85   86 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P256 test vectors                              85   86 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P256 test vectors                              86   87 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P256 test vectors                              86   87 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P256 test vectors                              87   88 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P256 test vectors                              87   88 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P256 test vectors                              88   89 - point with coordinate y = 1.
[OK]                ECDH P256 test vectors                              88   89 - point with coordinate y = 1.
 ...                ECDH P256 test vectors                              89   90 - point with coordinate y = 1.
[OK]                ECDH P256 test vectors                              89   90 - point with coordinate y = 1.
 ...                ECDH P256 test vectors                              90   91 - point with coordinate y = 1.
[OK]                ECDH P256 test vectors                              90   91 - point with coordinate y = 1.
 ...                ECDH P256 test vectors                              91   92 - point with coordinate y = 1.
[OK]                ECDH P256 test vectors                              91   92 - point with coordinate y = 1.
 ...                ECDH P256 test vectors                              92   93 - point with coordinate y = 1.
[OK]                ECDH P256 test vectors                              92   93 - point with coordinate y = 1.
 ...                ECDH P256 test vectors                              93   94 - point with coordinate y = 1.
[OK]                ECDH P256 test vectors                              93   94 - point with coordinate y = 1.
 ...                ECDH P256 test vectors                              94   95 - point with coordinate y = 1.
[OK]                ECDH P256 test vectors                              94   95 - point with coordinate y = 1.
 ...                ECDH P256 test vectors                              95   96 - point with coordinate y = 1.
[OK]                ECDH P256 test vectors                              95   96 - point with coordinate y = 1.
 ...                ECDH P256 test vectors                              96   97 - point with coordinate y = 1.
[OK]                ECDH P256 test vectors                              96   97 - point with coordinate y = 1.
 ...                ECDH P256 test vectors                              97   98 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                              97   98 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                              98   99 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                              98   99 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                              99   100 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                              99   100 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             100   101 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             100   101 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             101   102 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             101   102 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             102   103 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             102   103 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             103   104 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             103   104 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             104   105 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             104   105 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             105   106 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             105   106 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             106   107 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             106   107 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             107   108 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             107   108 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             108   109 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             108   109 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             109   110 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             109   110 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             110   111 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             110   111 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             111   112 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             111   112 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             112   113 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             112   113 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             113   114 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             113   114 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             114   115 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             114   115 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             115   116 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             115   116 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             116   117 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             116   117 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             117   118 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             117   118 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             118   119 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             118   119 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             119   120 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             119   120 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             120   121 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             120   121 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             121   122 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             121   122 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             122   123 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             122   123 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             123   124 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             123   124 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             124   125 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             124   125 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             125   126 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             125   126 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             126   127 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             126   127 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             127   128 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             127   128 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             128   129 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             128   129 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             129   130 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             129   130 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             130   131 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             130   131 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             131   132 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             131   132 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             132   133 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             132   133 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             133   134 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             133   134 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             134   135 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             134   135 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             135   136 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             135   136 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             136   137 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             136   137 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             137   138 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             137   138 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             138   139 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             138   139 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             139   140 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             139   140 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             140   141 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             140   141 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             141   142 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             141   142 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             142   143 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             142   143 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             143   144 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             143   144 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             144   145 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P256 test vectors                             144   145 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P256 test vectors                             145   146 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             145   146 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             146   147 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             146   147 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             147   148 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             147   148 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             148   149 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             148   149 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             149   150 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             149   150 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             150   151 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             150   151 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             151   152 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             151   152 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             152   153 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             152   153 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             153   154 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             153   154 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             154   155 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             154   155 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             155   156 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             155   156 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             156   157 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             156   157 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             157   158 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             157   158 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             158   159 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             158   159 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             159   160 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P256 test vectors                             159   160 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P256 test vectors                             160   161 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             160   161 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             161   162 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             161   162 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             162   163 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             162   163 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             163   164 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             163   164 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             164   165 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             164   165 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             165   166 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             165   166 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             166   167 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             166   167 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             167   168 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             167   168 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             168   169 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             168   169 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             169   170 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             169   170 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             170   171 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             170   171 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             171   172 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             171   172 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             172   173 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             172   173 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             173   174 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             173   174 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             174   175 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P256 test vectors                             174   175 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P256 test vectors                             175   176 - edge case private key.
[OK]                ECDH P256 test vectors                             175   176 - edge case private key.
 ...                ECDH P256 test vectors                             176   177 - edge case private key.
[OK]                ECDH P256 test vectors                             176   177 - edge case private key.
 ...                ECDH P256 test vectors                             177   178 - edge case private key.
[OK]                ECDH P256 test vectors                             177   178 - edge case private key.
 ...                ECDH P256 test vectors                             178   179 - edge case private key.
[OK]                ECDH P256 test vectors                             178   179 - edge case private key.
 ...                ECDH P256 test vectors                             179   180 - edge case private key.
[OK]                ECDH P256 test vectors                             179   180 - edge case private key.
 ...                ECDH P256 test vectors                             180   181 - edge case private key.
[OK]                ECDH P256 test vectors                             180   181 - edge case private key.
 ...                ECDH P256 test vectors                             181   182 - edge case private key.
[OK]                ECDH P256 test vectors                             181   182 - edge case private key.
 ...                ECDH P256 test vectors                             182   183 - edge case private key.
[OK]                ECDH P256 test vectors                             182   183 - edge case private key.
 ...                ECDH P256 test vectors                             183   184 - edge case private key.
[OK]                ECDH P256 test vectors                             183   184 - edge case private key.
 ...                ECDH P256 test vectors                             184   185 - edge case private key.
[OK]                ECDH P256 test vectors                             184   185 - edge case private key.
 ...                ECDH P256 test vectors                             185   186 - edge case private key.
[OK]                ECDH P256 test vectors                             185   186 - edge case private key.
 ...                ECDH P256 test vectors                             186   187 - edge case private key.
[OK]                ECDH P256 test vectors                             186   187 - edge case private key.
 ...                ECDH P256 test vectors                             187   188 - edge case private key.
[OK]                ECDH P256 test vectors                             187   188 - edge case private key.
 ...                ECDH P256 test vectors                             188   189 - edge case private key.
[OK]                ECDH P256 test vectors                             188   189 - edge case private key.
 ...                ECDH P256 test vectors                             189   190 - edge case private key.
[OK]                ECDH P256 test vectors                             189   190 - edge case private key.
 ...                ECDH P256 test vectors                             190   191 - CVE-2017-8932.
[OK]                ECDH P256 test vectors                             190   191 - CVE-2017-8932.
 ...                ECDH P256 test vectors                             191   192 - CVE-2017-8932.
[OK]                ECDH P256 test vectors                             191   192 - CVE-2017-8932.
 ...                ECDH P256 test vectors                             192   193 - point is not on curve.
[OK]                ECDH P256 test vectors                             192   193 - point is not on curve.
 ...                ECDH P256 test vectors                             193   194 - point is not on curve.
[OK]                ECDH P256 test vectors                             193   194 - point is not on curve.
 ...                ECDH P256 test vectors                             194   195 - point is not on curve.
[OK]                ECDH P256 test vectors                             194   195 - point is not on curve.
 ...                ECDH P256 test vectors                             195   196 - point is not on curve.
[OK]                ECDH P256 test vectors                             195   196 - point is not on curve.
 ...                ECDH P256 test vectors                             196   197 - point is not on curve.
[OK]                ECDH P256 test vectors                             196   197 - point is not on curve.
 ...                ECDH P256 test vectors                             197   198 - point is not on curve.
[OK]                ECDH P256 test vectors                             197   198 - point is not on curve.
 ...                ECDH P256 test vectors                             198   199 - point is not on curve.
[OK]                ECDH P256 test vectors                             198   199 - point is not on curve.
 ...                ECDH P256 test vectors                             199   200 - point is not on curve.
[OK]                ECDH P256 test vectors                             199   200 - point is not on curve.
 ...                ECDH P256 test vectors                             200   201 - point is not on curve.
[OK]                ECDH P256 test vectors                             200   201 - point is not on curve.
 ...                ECDH P256 test vectors                             201   202 - point is not on curve.
[OK]                ECDH P256 test vectors                             201   202 - point is not on curve.
 ...                ECDH P256 test vectors                             202   203 - point is not on curve.
[OK]                ECDH P256 test vectors                             202   203 - point is not on curve.
 ...                ECDH P256 test vectors                             203   204 - point is not on curve.
[OK]                ECDH P256 test vectors                             203   204 - point is not on curve.
 ...                ECDH P256 test vectors                             204   205 - point is not on curve.
[OK]                ECDH P256 test vectors                             204   205 - point is not on curve.
 ...                ECDH P256 test vectors                             205   206 - point is not on curve.
[OK]                ECDH P256 test vectors                             205   206 - point is not on curve.
 ...                ECDH P256 test vectors                             206   207 - point is not on curve.
[OK]                ECDH P256 test vectors                             206   207 - point is not on curve.
 ...                ECDH P256 test vectors                             207   208 - point is not on curve.
[OK]                ECDH P256 test vectors                             207   208 - point is not on curve.
 ...                ECDH P256 test vectors                             208   209 - .
[OK]                ECDH P256 test vectors                             208   209 - .
 ...                ECDH P256 test vectors                             209   210 - public point not on curve.
[OK]                ECDH P256 test vectors                             209   210 - public point not on curve.
 ...                ECDH P256 test vectors                             210   211 - public point = (0,0).
[OK]                ECDH P256 test vectors                             210   211 - public point = (0,0).
 ...                ECDH P256 test vectors                             211   224 - using secp224r1.
[OK]                ECDH P256 test vectors                             211   224 - using secp224r1.
 ...                ECDH P256 test vectors                             212   225 - using secp256k1.
[OK]                ECDH P256 test vectors                             212   225 - using secp256k1.
 ...                ECDH P256 test vectors                             213   228 - Public key uses wrong curve: secp224r1.
[OK]                ECDH P256 test vectors                             213   228 - Public key uses wrong curve: secp224r1.
 ...                ECDH P256 test vectors                             214   229 - Public key uses wrong curve: secp384r1.
[OK]                ECDH P256 test vectors                             214   229 - Public key uses wrong curve: secp384r1.
 ...                ECDH P256 test vectors                             215   230 - Public key uses wrong curve: secp521r1.
[OK]                ECDH P256 test vectors                             215   230 - Public key uses wrong curve: secp521r1.
 ...                ECDH P256 test vectors                             216   231 - Public key uses wrong curve: secp256k1.
[OK]                ECDH P256 test vectors                             216   231 - Public key uses wrong curve: secp256k1.
 ...                ECDH P256 test vectors                             217   232 - Public key uses wrong curve: secp224k1.
[OK]                ECDH P256 test vectors                             217   232 - Public key uses wrong curve: secp224k1.
 ...                ECDH P256 test vectors                             218   233 - Public key uses wrong curve: brainpoolP224r1.
[OK]                ECDH P256 test vectors                             218   233 - Public key uses wrong curve: brainpoolP224r1.
 ...                ECDH P256 test vectors                             219   234 - Public key uses wrong curve: brainpoolP256r1.
[OK]                ECDH P256 test vectors                             219   234 - Public key uses wrong curve: brainpoolP256r1.
 ...                ECDH P256 test vectors                             220   235 - Public key uses wrong curve: brainpoolP320r1.
[OK]                ECDH P256 test vectors                             220   235 - Public key uses wrong curve: brainpoolP320r1.
 ...                ECDH P256 test vectors                             221   236 - Public key uses wrong curve: brainpoolP384r1.
[OK]                ECDH P256 test vectors                             221   236 - Public key uses wrong curve: brainpoolP384r1.
 ...                ECDH P256 test vectors                             222   237 - Public key uses wrong curve: brainpoolP512r1.
[OK]                ECDH P256 test vectors                             222   237 - Public key uses wrong curve: brainpoolP512r1.
 ...                ECDH P256 test vectors                             223   238 - Public key uses wrong curve: brainpoolP224t1.
[OK]                ECDH P256 test vectors                             223   238 - Public key uses wrong curve: brainpoolP224t1.
 ...                ECDH P256 test vectors                             224   239 - Public key uses wrong curve: brainpoolP256t1.
[OK]                ECDH P256 test vectors                             224   239 - Public key uses wrong curve: brainpoolP256t1.
 ...                ECDH P256 test vectors                             225   240 - Public key uses wrong curve: brainpoolP320t1.
[OK]                ECDH P256 test vectors                             225   240 - Public key uses wrong curve: brainpoolP320t1.
 ...                ECDH P256 test vectors                             226   241 - Public key uses wrong curve: brainpoolP384t1.
[OK]                ECDH P256 test vectors                             226   241 - Public key uses wrong curve: brainpoolP384t1.
 ...                ECDH P256 test vectors                             227   242 - Public key uses wrong curve: brainpoolP512t1.
[OK]                ECDH P256 test vectors                             227   242 - Public key uses wrong curve: brainpoolP512t1.
 ...                ECDH P256 test vectors                             228   243 - invalid public key.
[OK]                ECDH P256 test vectors                             228   243 - invalid public key.
 ...                ECDH P256 test vectors                             229   244 - public key is a low order point on twist.
[OK]                ECDH P256 test vectors                             229   244 - public key is a low order point on twist.
 ...                ECDH P256 test vectors                             230   245 - public key is a low order point on twist.
[OK]                ECDH P256 test vectors                             230   245 - public key is a low order point on twist.
 ...                ECDH P256 test vectors                             231   246 - public key is a low order point on twist.
[OK]                ECDH P256 test vectors                             231   246 - public key is a low order point on twist.
 ...                ECDH P256 test vectors                             232   247 - public key is a low order point on twist.
[OK]                ECDH P256 test vectors                             232   247 - public key is a low order point on twist.
 ...                ECDH P256 test vectors                             233   248 - public key is a low order point on twist.
[OK]                ECDH P256 test vectors                             233   248 - public key is a low order point on twist.
 ...                ECDH P256 test vectors                             234   249 - public key is a low order point on twist.
[OK]                ECDH P256 test vectors                             234   249 - public key is a low order point on twist.
 ...                ECDSA P256 test vectors (SHA256)                     0   1 - signature malleability.
[OK]                ECDSA P256 test vectors (SHA256)                     0   1 - signature malleability.
 ...                ECDSA P256 test vectors (SHA256)                     1   2 - Legacy:ASN encoding of s misses leading 0.
[OK]                ECDSA P256 test vectors (SHA256)                     1   2 - Legacy:ASN encoding of s misses leading 0.
 ...                ECDSA P256 test vectors (SHA256)                     2   3 - valid.
[OK]                ECDSA P256 test vectors (SHA256)                     2   3 - valid.
 ...                ECDSA P256 test vectors (SHA256)                     3   4 - long form encoding of length of sequence.
[OK]                ECDSA P256 test vectors (SHA256)                     3   4 - long form encoding of length of sequence.
 ...                ECDSA P256 test vectors (SHA256)                     4   5 - length of sequence contains leading 0.
[OK]                ECDSA P256 test vectors (SHA256)                     4   5 - length of sequence contains leading 0.
 ...                ECDSA P256 test vectors (SHA256)                     5   6 - wrong length of sequence.
[OK]                ECDSA P256 test vectors (SHA256)                     5   6 - wrong length of sequence.
 ...                ECDSA P256 test vectors (SHA256)                     6   7 - wrong length of sequence.
[OK]                ECDSA P256 test vectors (SHA256)                     6   7 - wrong length of sequence.
 ...                ECDSA P256 test vectors (SHA256)                     7   8 - uint32 overflow in length of sequence.
[OK]                ECDSA P256 test vectors (SHA256)                     7   8 - uint32 overflow in length of sequence.
 ...                ECDSA P256 test vectors (SHA256)                     8   9 - uint64 overflow in length of sequence.
[OK]                ECDSA P256 test vectors (SHA256)                     8   9 - uint64 overflow in length of sequence.
 ...                ECDSA P256 test vectors (SHA256)                     9   10 - length of sequence = 2**31 - 1.
[OK]                ECDSA P256 test vectors (SHA256)                     9   10 - length of sequence = 2**31 - 1.
 ...                ECDSA P256 test vectors (SHA256)                    10   11 - length of sequence = 2**32 - 1.
[OK]                ECDSA P256 test vectors (SHA256)                    10   11 - length of sequence = 2**32 - 1.
 ...                ECDSA P256 test vectors (SHA256)                    11   12 - length of sequence = 2**40 - 1.
[OK]                ECDSA P256 test vectors (SHA256)                    11   12 - length of sequence = 2**40 - 1.
 ...                ECDSA P256 test vectors (SHA256)                    12   13 - length of sequence = 2**64 - 1.
[OK]                ECDSA P256 test vectors (SHA256)                    12   13 - length of sequence = 2**64 - 1.
 ...                ECDSA P256 test vectors (SHA256)                    13   14 - incorrect length of sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    13   14 - incorrect length of sequence.
 ...                ECDSA P256 test vectors (SHA256)                    14   15 - indefinite length without termination.
[OK]                ECDSA P256 test vectors (SHA256)                    14   15 - indefinite length without termination.
 ...                ECDSA P256 test vectors (SHA256)                    15   16 - indefinite length without termination.
[OK]                ECDSA P256 test vectors (SHA256)                    15   16 - indefinite length without termination.
 ...                ECDSA P256 test vectors (SHA256)                    16   17 - indefinite length without termination.
[OK]                ECDSA P256 test vectors (SHA256)                    16   17 - indefinite length without termination.
 ...                ECDSA P256 test vectors (SHA256)                    17   18 - removing sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    17   18 - removing sequence.
 ...                ECDSA P256 test vectors (SHA256)                    18   19 - lonely sequence tag.
[OK]                ECDSA P256 test vectors (SHA256)                    18   19 - lonely sequence tag.
 ...                ECDSA P256 test vectors (SHA256)                    19   20 - appending 0's to sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    19   20 - appending 0's to sequence.
 ...                ECDSA P256 test vectors (SHA256)                    20   21 - prepending 0's to sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    20   21 - prepending 0's to sequence.
 ...                ECDSA P256 test vectors (SHA256)                    21   22 - appending unused 0's to sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    21   22 - appending unused 0's to sequence.
 ...                ECDSA P256 test vectors (SHA256)                    22   23 - appending null value to sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    22   23 - appending null value to sequence.
 ...                ECDSA P256 test vectors (SHA256)                    23   24 - including garbage.
[OK]                ECDSA P256 test vectors (SHA256)                    23   24 - including garbage.
 ...                ECDSA P256 test vectors (SHA256)                    24   25 - including garbage.
[OK]                ECDSA P256 test vectors (SHA256)                    24   25 - including garbage.
 ...                ECDSA P256 test vectors (SHA256)                    25   26 - including garbage.
[OK]                ECDSA P256 test vectors (SHA256)                    25   26 - including garbage.
 ...                ECDSA P256 test vectors (SHA256)                    26   27 - including garbage.
[OK]                ECDSA P256 test vectors (SHA256)                    26   27 - including garbage.
 ...                ECDSA P256 test vectors (SHA256)                    27   28 - including garbage.
[OK]                ECDSA P256 test vectors (SHA256)                    27   28 - including garbage.
 ...                ECDSA P256 test vectors (SHA256)                    28   29 - including garbage.
[OK]                ECDSA P256 test vectors (SHA256)                    28   29 - including garbage.
 ...                ECDSA P256 test vectors (SHA256)                    29   30 - including garbage.
[OK]                ECDSA P256 test vectors (SHA256)                    29   30 - including garbage.
 ...                ECDSA P256 test vectors (SHA256)                    30   31 - including garbage.
[OK]                ECDSA P256 test vectors (SHA256)                    30   31 - including garbage.
 ...                ECDSA P256 test vectors (SHA256)                    31   32 - including garbage.
[OK]                ECDSA P256 test vectors (SHA256)                    31   32 - including garbage.
 ...                ECDSA P256 test vectors (SHA256)                    32   33 - including undefined tags.
[OK]                ECDSA P256 test vectors (SHA256)                    32   33 - including undefined tags.
 ...                ECDSA P256 test vectors (SHA256)                    33   34 - including undefined tags.
[OK]                ECDSA P256 test vectors (SHA256)                    33   34 - including undefined tags.
 ...                ECDSA P256 test vectors (SHA256)                    34   35 - including undefined tags.
[OK]                ECDSA P256 test vectors (SHA256)                    34   35 - including undefined tags.
 ...                ECDSA P256 test vectors (SHA256)                    35   36 - including undefined tags.
[OK]                ECDSA P256 test vectors (SHA256)                    35   36 - including undefined tags.
 ...                ECDSA P256 test vectors (SHA256)                    36   37 - including undefined tags.
[OK]                ECDSA P256 test vectors (SHA256)                    36   37 - including undefined tags.
 ...                ECDSA P256 test vectors (SHA256)                    37   38 - including undefined tags.
[OK]                ECDSA P256 test vectors (SHA256)                    37   38 - including undefined tags.
 ...                ECDSA P256 test vectors (SHA256)                    38   39 - truncated length of sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    38   39 - truncated length of sequence.
 ...                ECDSA P256 test vectors (SHA256)                    39   40 - using composition with indefinite length.
[OK]                ECDSA P256 test vectors (SHA256)                    39   40 - using composition with indefinite length.
 ...                ECDSA P256 test vectors (SHA256)                    40   41 - using composition with indefinite length.
[OK]                ECDSA P256 test vectors (SHA256)                    40   41 - using composition with indefinite length.
 ...                ECDSA P256 test vectors (SHA256)                    41   42 - using composition with indefinite length.
[OK]                ECDSA P256 test vectors (SHA256)                    41   42 - using composition with indefinite length.
 ...                ECDSA P256 test vectors (SHA256)                    42   43 - using composition with wrong tag.
[OK]                ECDSA P256 test vectors (SHA256)                    42   43 - using composition with wrong tag.
 ...                ECDSA P256 test vectors (SHA256)                    43   44 - using composition with wrong tag.
[OK]                ECDSA P256 test vectors (SHA256)                    43   44 - using composition with wrong tag.
 ...                ECDSA P256 test vectors (SHA256)                    44   45 - using composition with wrong tag.
[OK]                ECDSA P256 test vectors (SHA256)                    44   45 - using composition with wrong tag.
 ...                ECDSA P256 test vectors (SHA256)                    45   46 - Replacing sequence with NULL.
[OK]                ECDSA P256 test vectors (SHA256)                    45   46 - Replacing sequence with NULL.
 ...                ECDSA P256 test vectors (SHA256)                    46   47 - changing tag value of sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    46   47 - changing tag value of sequence.
 ...                ECDSA P256 test vectors (SHA256)                    47   48 - changing tag value of sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    47   48 - changing tag value of sequence.
 ...                ECDSA P256 test vectors (SHA256)                    48   49 - changing tag value of sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    48   49 - changing tag value of sequence.
 ...                ECDSA P256 test vectors (SHA256)                    49   50 - changing tag value of sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    49   50 - changing tag value of sequence.
 ...                ECDSA P256 test vectors (SHA256)                    50   51 - changing tag value of sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    50   51 - changing tag value of sequence.
 ...                ECDSA P256 test vectors (SHA256)                    51   52 - dropping value of sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    51   52 - dropping value of sequence.
 ...                ECDSA P256 test vectors (SHA256)                    52   53 - using composition for sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    52   53 - using composition for sequence.
 ...                ECDSA P256 test vectors (SHA256)                    53   54 - truncated sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    53   54 - truncated sequence.
 ...                ECDSA P256 test vectors (SHA256)                    54   55 - truncated sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    54   55 - truncated sequence.
 ...                ECDSA P256 test vectors (SHA256)                    55   56 - indefinite length.
[OK]                ECDSA P256 test vectors (SHA256)                    55   56 - indefinite length.
 ...                ECDSA P256 test vectors (SHA256)                    56   57 - indefinite length with truncated delimiter.
[OK]                ECDSA P256 test vectors (SHA256)                    56   57 - indefinite length with truncated delimiter.
 ...                ECDSA P256 test vectors (SHA256)                    57   58 - indefinite length with additional element.
[OK]                ECDSA P256 test vectors (SHA256)                    57   58 - indefinite length with additional element.
 ...                ECDSA P256 test vectors (SHA256)                    58   59 - indefinite length with truncated element.
[OK]                ECDSA P256 test vectors (SHA256)                    58   59 - indefinite length with truncated element.
 ...                ECDSA P256 test vectors (SHA256)                    59   60 - indefinite length with garbage.
[OK]                ECDSA P256 test vectors (SHA256)                    59   60 - indefinite length with garbage.
 ...                ECDSA P256 test vectors (SHA256)                    60   61 - indefinite length with nonempty EOC.
[OK]                ECDSA P256 test vectors (SHA256)                    60   61 - indefinite length with nonempty EOC.
 ...                ECDSA P256 test vectors (SHA256)                    61   62 - prepend empty sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    61   62 - prepend empty sequence.
 ...                ECDSA P256 test vectors (SHA256)                    62   63 - append empty sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    62   63 - append empty sequence.
 ...                ECDSA P256 test vectors (SHA256)                    63   64 - append garbage with high tag number.
[OK]                ECDSA P256 test vectors (SHA256)                    63   64 - append garbage with high tag number.
 ...                ECDSA P256 test vectors (SHA256)                    64   65 - sequence of sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    64   65 - sequence of sequence.
 ...                ECDSA P256 test vectors (SHA256)                    65   66 - truncated sequence: removed last 1 elements.
[OK]                ECDSA P256 test vectors (SHA256)                    65   66 - truncated sequence: removed last 1 elements.
 ...                ECDSA P256 test vectors (SHA256)                    66   67 - repeating element in sequence.
[OK]                ECDSA P256 test vectors (SHA256)                    66   67 - repeating element in sequence.
 ...                ECDSA P256 test vectors (SHA256)                    67   68 - long form encoding of length of integer.
[OK]                ECDSA P256 test vectors (SHA256)                    67   68 - long form encoding of length of integer.
 ...                ECDSA P256 test vectors (SHA256)                    68   69 - long form encoding of length of integer.
[OK]                ECDSA P256 test vectors (SHA256)                    68   69 - long form encoding of length of integer.
 ...                ECDSA P256 test vectors (SHA256)                    69   70 - length of integer contains leading 0.
[OK]                ECDSA P256 test vectors (SHA256)                    69   70 - length of integer contains leading 0.
 ...                ECDSA P256 test vectors (SHA256)                    70   71 - length of integer contains leading 0.
[OK]                ECDSA P256 test vectors (SHA256)                    70   71 - length of integer contains leading 0.
 ...                ECDSA P256 test vectors (SHA256)                    71   72 - wrong length of integer.
[OK]                ECDSA P256 test vectors (SHA256)                    71   72 - wrong length of integer.
 ...                ECDSA P256 test vectors (SHA256)                    72   73 - wrong length of integer.
[OK]                ECDSA P256 test vectors (SHA256)                    72   73 - wrong length of integer.
 ...                ECDSA P256 test vectors (SHA256)                    73   74 - wrong length of integer.
[OK]                ECDSA P256 test vectors (SHA256)                    73   74 - wrong length of integer.
 ...                ECDSA P256 test vectors (SHA256)                    74   75 - wrong length of integer.
[OK]                ECDSA P256 test vectors (SHA256)                    74   75 - wrong length of integer.
 ...                ECDSA P256 test vectors (SHA256)                    75   76 - uint32 overflow in length of integer.
[OK]                ECDSA P256 test vectors (SHA256)                    75   76 - uint32 overflow in length of integer.
 ...                ECDSA P256 test vectors (SHA256)                    76   77 - uint32 overflow in length of integer.
[OK]                ECDSA P256 test vectors (SHA256)                    76   77 - uint32 overflow in length of integer.
 ...                ECDSA P256 test vectors (SHA256)                    77   78 - uint64 overflow in length of integer.
[OK]                ECDSA P256 test vectors (SHA256)                    77   78 - uint64 overflow in length of integer.
 ...                ECDSA P256 test vectors (SHA256)                    78   79 - uint64 overflow in length of integer.
[OK]                ECDSA P256 test vectors (SHA256)                    78   79 - uint64 overflow in length of integer.
 ...                ECDSA P256 test vectors (SHA256)                    79   80 - length of integer = 2**31 - 1.
[OK]                ECDSA P256 test vectors (SHA256)                    79   80 - length of integer = 2**31 - 1.
 ...                ECDSA P256 test vectors (SHA256)                    80   81 - length of integer = 2**31 - 1.
[OK]                ECDSA P256 test vectors (SHA256)                    80   81 - length of integer = 2**31 - 1.
 ...                ECDSA P256 test vectors (SHA256)                    81   82 - length of integer = 2**32 - 1.
[OK]                ECDSA P256 test vectors (SHA256)                    81   82 - length of integer = 2**32 - 1.
 ...                ECDSA P256 test vectors (SHA256)                    82   83 - length of integer = 2**32 - 1.
[OK]                ECDSA P256 test vectors (SHA256)                    82   83 - length of integer = 2**32 - 1.
 ...                ECDSA P256 test vectors (SHA256)                    83   84 - length of integer = 2**40 - 1.
[OK]                ECDSA P256 test vectors (SHA256)                    83   84 - length of integer = 2**40 - 1.
 ...                ECDSA P256 test vectors (SHA256)                    84   85 - length of integer = 2**40 - 1.
[OK]                ECDSA P256 test vectors (SHA256)                    84   85 - length of integer = 2**40 - 1.
 ...                ECDSA P256 test vectors (SHA256)                    85   86 - length of integer = 2**64 - 1.
[OK]                ECDSA P256 test vectors (SHA256)                    85   86 - length of integer = 2**64 - 1.
 ...                ECDSA P256 test vectors (SHA256)                    86   87 - length of integer = 2**64 - 1.
[OK]                ECDSA P256 test vectors (SHA256)                    86   87 - length of integer = 2**64 - 1.
 ...                ECDSA P256 test vectors (SHA256)                    87   88 - incorrect length of integer.
[OK]                ECDSA P256 test vectors (SHA256)                    87   88 - incorrect length of integer.
 ...                ECDSA P256 test vectors (SHA256)                    88   89 - incorrect length of integer.
[OK]                ECDSA P256 test vectors (SHA256)                    88   89 - incorrect length of integer.
 ...                ECDSA P256 test vectors (SHA256)                    89   90 - removing integer.
[OK]                ECDSA P256 test vectors (SHA256)                    89   90 - removing integer.
 ...                ECDSA P256 test vectors (SHA256)                    90   91 - lonely integer tag.
[OK]                ECDSA P256 test vectors (SHA256)                    90   91 - lonely integer tag.
 ...                ECDSA P256 test vectors (SHA256)                    91   92 - lonely integer tag.
[OK]                ECDSA P256 test vectors (SHA256)                    91   92 - lonely integer tag.
 ...                ECDSA P256 test vectors (SHA256)                    92   93 - appending 0's to integer.
[OK]                ECDSA P256 test vectors (SHA256)                    92   93 - appending 0's to integer.
 ...                ECDSA P256 test vectors (SHA256)                    93   94 - appending 0's to integer.
[OK]                ECDSA P256 test vectors (SHA256)                    93   94 - appending 0's to integer.
 ...                ECDSA P256 test vectors (SHA256)                    94   95 - prepending 0's to integer.
[OK]                ECDSA P256 test vectors (SHA256)                    94   95 - prepending 0's to integer.
 ...                ECDSA P256 test vectors (SHA256)                    95   96 - prepending 0's to integer.
[OK]                ECDSA P256 test vectors (SHA256)                    95   96 - prepending 0's to integer.
 ...                ECDSA P256 test vectors (SHA256)                    96   97 - appending unused 0's to integer.
[OK]                ECDSA P256 test vectors (SHA256)                    96   97 - appending unused 0's to integer.
 ...                ECDSA P256 test vectors (SHA256)                    97   98 - appending null value to integer.
[OK]                ECDSA P256 test vectors (SHA256)                    97   98 - appending null value to integer.
 ...                ECDSA P256 test vectors (SHA256)                    98   99 - appending null value to integer.
[OK]                ECDSA P256 test vectors (SHA256)                    98   99 - appending null value to integer.
 ...                ECDSA P256 test vectors (SHA256)                    99   100 - truncated length of integer.
[OK]                ECDSA P256 test vectors (SHA256)                    99   100 - truncated length of integer.
 ...                ECDSA P256 test vectors (SHA256)                   100   101 - truncated length of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   100   101 - truncated length of integer.
 ...                ECDSA P256 test vectors (SHA256)                   101   102 - Replacing integer with NULL.
[OK]                ECDSA P256 test vectors (SHA256)                   101   102 - Replacing integer with NULL.
 ...                ECDSA P256 test vectors (SHA256)                   102   103 - Replacing integer with NULL.
[OK]                ECDSA P256 test vectors (SHA256)                   102   103 - Replacing integer with NULL.
 ...                ECDSA P256 test vectors (SHA256)                   103   104 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   103   104 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA256)                   104   105 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   104   105 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA256)                   105   106 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   105   106 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA256)                   106   107 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   106   107 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA256)                   107   108 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   107   108 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA256)                   108   109 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   108   109 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA256)                   109   110 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   109   110 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA256)                   110   111 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   110   111 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA256)                   111   112 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   111   112 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA256)                   112   113 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   112   113 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA256)                   113   114 - dropping value of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   113   114 - dropping value of integer.
 ...                ECDSA P256 test vectors (SHA256)                   114   115 - dropping value of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   114   115 - dropping value of integer.
 ...                ECDSA P256 test vectors (SHA256)                   115   116 - using composition for integer.
[OK]                ECDSA P256 test vectors (SHA256)                   115   116 - using composition for integer.
 ...                ECDSA P256 test vectors (SHA256)                   116   117 - using composition for integer.
[OK]                ECDSA P256 test vectors (SHA256)                   116   117 - using composition for integer.
 ...                ECDSA P256 test vectors (SHA256)                   117   118 - modify first byte of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   117   118 - modify first byte of integer.
 ...                ECDSA P256 test vectors (SHA256)                   118   119 - modify first byte of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   118   119 - modify first byte of integer.
 ...                ECDSA P256 test vectors (SHA256)                   119   120 - modify last byte of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   119   120 - modify last byte of integer.
 ...                ECDSA P256 test vectors (SHA256)                   120   121 - modify last byte of integer.
[OK]                ECDSA P256 test vectors (SHA256)                   120   121 - modify last byte of integer.
 ...                ECDSA P256 test vectors (SHA256)                   121   122 - truncated integer.
[OK]                ECDSA P256 test vectors (SHA256)                   121   122 - truncated integer.
 ...                ECDSA P256 test vectors (SHA256)                   122   123 - truncated integer.
[OK]                ECDSA P256 test vectors (SHA256)                   122   123 - truncated integer.
 ...                ECDSA P256 test vectors (SHA256)                   123   124 - truncated integer.
[OK]                ECDSA P256 test vectors (SHA256)                   123   124 - truncated integer.
 ...                ECDSA P256 test vectors (SHA256)                   124   125 - leading ff in integer.
[OK]                ECDSA P256 test vectors (SHA256)                   124   125 - leading ff in integer.
 ...                ECDSA P256 test vectors (SHA256)                   125   126 - leading ff in integer.
[OK]                ECDSA P256 test vectors (SHA256)                   125   126 - leading ff in integer.
 ...                ECDSA P256 test vectors (SHA256)                   126   127 - replaced integer by infinity.
[OK]                ECDSA P256 test vectors (SHA256)                   126   127 - replaced integer by infinity.
 ...                ECDSA P256 test vectors (SHA256)                   127   128 - replaced integer by infinity.
[OK]                ECDSA P256 test vectors (SHA256)                   127   128 - replaced integer by infinity.
 ...                ECDSA P256 test vectors (SHA256)                   128   129 - replacing integer with zero.
[OK]                ECDSA P256 test vectors (SHA256)                   128   129 - replacing integer with zero.
 ...                ECDSA P256 test vectors (SHA256)                   129   130 - replacing integer with zero.
[OK]                ECDSA P256 test vectors (SHA256)                   129   130 - replacing integer with zero.
 ...                ECDSA P256 test vectors (SHA256)                   130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA256)                   130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA256)                   131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA256)                   131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA256)                   132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA256)                   132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA256)                   133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA256)                   133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA256)                   134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA256)                   134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA256)                   135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA256)                   135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA256)                   136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA256)                   136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA256)                   137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA256)                   137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA256)                   138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA256)                   138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA256)                   139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA256)                   139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA256)                   140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA256)                   140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA256)                   141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA256)                   141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA256)                   142   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA256)                   142   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA256)                   143   144 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   143   144 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   144   145 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   144   145 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   145   146 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   145   146 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   146   147 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   146   147 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   147   148 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   147   148 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   148   149 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   148   149 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   149   150 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   149   150 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   150   151 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   150   151 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   151   152 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   151   152 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   152   153 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   152   153 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   153   154 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   153   154 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   154   155 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   154   155 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   155   156 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   155   156 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   156   157 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   156   157 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   157   158 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   157   158 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   158   159 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   158   159 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   159   160 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   159   160 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   160   161 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   160   161 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   161   162 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   161   162 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   162   163 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   162   163 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   163   164 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   163   164 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   164   165 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   164   165 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   165   166 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   165   166 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   166   167 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   166   167 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   167   168 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   167   168 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   168   169 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   168   169 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   169   170 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   169   170 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   170   171 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   170   171 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   171   172 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   171   172 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   172   173 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   172   173 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   173   174 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   173   174 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   174   175 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   174   175 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   175   176 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   175   176 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   176   177 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   176   177 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   177   178 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   177   178 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   178   179 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   178   179 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   179   180 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   179   180 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   180   181 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   180   181 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   181   182 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   181   182 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   182   183 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   182   183 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   183   184 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   183   184 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   184   185 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   184   185 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   185   186 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   185   186 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   186   187 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   186   187 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   187   188 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   187   188 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   188   189 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   188   189 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   189   190 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   189   190 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   190   191 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   190   191 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   191   192 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   191   192 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   192   193 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   192   193 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   193   194 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   193   194 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   194   195 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   194   195 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   195   196 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   195   196 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   196   197 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   196   197 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   197   198 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   197   198 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   198   199 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   198   199 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   199   200 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   199   200 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   200   201 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   200   201 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   201   202 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   201   202 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   202   203 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   202   203 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   203   204 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   203   204 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   204   205 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   204   205 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   205   206 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   205   206 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   206   207 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   206   207 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   207   208 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   207   208 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   208   209 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   208   209 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   209   210 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   209   210 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   210   211 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   210   211 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   211   212 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   211   212 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   212   213 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   212   213 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   213   214 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   213   214 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   214   215 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   214   215 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   215   216 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   215   216 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   216   217 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   216   217 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   217   218 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   217   218 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   218   219 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   218   219 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   219   220 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   219   220 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   220   221 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   220   221 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   221   222 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   221   222 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   222   223 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   222   223 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA256)                   223   224 - Signature encoding contains wrong types.
[OK]                ECDSA P256 test vectors (SHA256)                   223   224 - Signature encoding contains wrong types.
 ...                ECDSA P256 test vectors (SHA256)                   224   225 - Signature encoding contains wrong types.
[OK]                ECDSA P256 test vectors (SHA256)                   224   225 - Signature encoding contains wrong types.
 ...                ECDSA P256 test vectors (SHA256)                   225   226 - Signature encoding contains wrong types.
[OK]                ECDSA P256 test vectors (SHA256)                   225   226 - Signature encoding contains wrong types.
 ...                ECDSA P256 test vectors (SHA256)                   226   227 - Signature encoding contains wrong types.
[OK]                ECDSA P256 test vectors (SHA256)                   226   227 - Signature encoding contains wrong types.
 ...                ECDSA P256 test vectors (SHA256)                   227   228 - Signature encoding contains wrong types.
[OK]                ECDSA P256 test vectors (SHA256)                   227   228 - Signature encoding contains wrong types.
 ...                ECDSA P256 test vectors (SHA256)                   228   229 - Signature encoding contains wrong types.
[OK]                ECDSA P256 test vectors (SHA256)                   228   229 - Signature encoding contains wrong types.
 ...                ECDSA P256 test vectors (SHA256)                   229   230 - Edge case for Shamir multiplication.
[OK]                ECDSA P256 test vectors (SHA256)                   229   230 - Edge case for Shamir multiplication.
 ...                ECDSA P256 test vectors (SHA256)                   230   231 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   230   231 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   231   232 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   231   232 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   232   233 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   232   233 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   233   234 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   233   234 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   234   235 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   234   235 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   235   236 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   235   236 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   236   237 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   236   237 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   237   238 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   237   238 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   238   239 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   238   239 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   239   240 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   239   240 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   240   241 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   240   241 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   241   242 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   241   242 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   242   243 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   242   243 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   243   244 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   243   244 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   244   245 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   244   245 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   245   246 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   245   246 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   246   247 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   246   247 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   247   248 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   247   248 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   248   249 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   248   249 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   249   250 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   249   250 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   250   251 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   250   251 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   251   252 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   251   252 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   252   253 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   252   253 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   253   254 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   253   254 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   254   255 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   254   255 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   255   256 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   255   256 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   256   257 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   256   257 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   257   258 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   257   258 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   258   259 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   258   259 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   259   260 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   259   260 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   260   261 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   260   261 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   261   262 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   261   262 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   262   263 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   262   263 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   263   264 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   263   264 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   264   265 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   264   265 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   265   266 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   265   266 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   266   267 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   266   267 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   267   268 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   267   268 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   268   269 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   268   269 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   269   270 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   269   270 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   270   271 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   270   271 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   271   272 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   271   272 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   272   273 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   272   273 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   273   274 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   273   274 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   274   275 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   274   275 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   275   276 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   275   276 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   276   277 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   276   277 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   277   278 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   277   278 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   278   279 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   278   279 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   279   280 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   279   280 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   280   281 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   280   281 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   281   282 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   281   282 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   282   283 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   282   283 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   283   284 - special case hash.
[OK]                ECDSA P256 test vectors (SHA256)                   283   284 - special case hash.
 ...                ECDSA P256 test vectors (SHA256)                   284   285 - k*G has a large x-coordinate.
[OK]                ECDSA P256 test vectors (SHA256)                   284   285 - k*G has a large x-coordinate.
 ...                ECDSA P256 test vectors (SHA256)                   285   286 - r too large.
[OK]                ECDSA P256 test vectors (SHA256)                   285   286 - r too large.
 ...                ECDSA P256 test vectors (SHA256)                   286   287 - r,s are large.
[OK]                ECDSA P256 test vectors (SHA256)                   286   287 - r,s are large.
 ...                ECDSA P256 test vectors (SHA256)                   287   288 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA P256 test vectors (SHA256)                   287   288 - r and s^-1 have a large Hamming weight.
 ...                ECDSA P256 test vectors (SHA256)                   288   289 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA P256 test vectors (SHA256)                   288   289 - r and s^-1 have a large Hamming weight.
 ...                ECDSA P256 test vectors (SHA256)                   289   290 - small r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   289   290 - small r and s.
 ...                ECDSA P256 test vectors (SHA256)                   290   291 - small r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   290   291 - small r and s.
 ...                ECDSA P256 test vectors (SHA256)                   291   292 - small r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   291   292 - small r and s.
 ...                ECDSA P256 test vectors (SHA256)                   292   293 - small r and s.
[OK]                ECDSA P256 test vectors (SHA256)                   292   293 - small r and s.
 ...                ECDSA P256 test vectors (SHA256)                   293   294 - r is larger than n.
[OK]                ECDSA P256 test vectors (SHA256)                   293   294 - r is larger than n.
 ...                ECDSA P256 test vectors (SHA256)                   294   295 - s is larger than n.
[OK]                ECDSA P256 test vectors (SHA256)                   294   295 - s is larger than n.
 ...                ECDSA P256 test vectors (SHA256)                   295   296 - small r and s^-1.
[OK]                ECDSA P256 test vectors (SHA256)                   295   296 - small r and s^-1.
 ...                ECDSA P256 test vectors (SHA256)                   296   297 - smallish r and s^-1.
[OK]                ECDSA P256 test vectors (SHA256)                   296   297 - smallish r and s^-1.
 ...                ECDSA P256 test vectors (SHA256)                   297   298 - 100-bit r and small s^-1.
[OK]                ECDSA P256 test vectors (SHA256)                   297   298 - 100-bit r and small s^-1.
 ...                ECDSA P256 test vectors (SHA256)                   298   299 - small r and 100 bit s^-1.
[OK]                ECDSA P256 test vectors (SHA256)                   298   299 - small r and 100 bit s^-1.
 ...                ECDSA P256 test vectors (SHA256)                   299   300 - 100-bit r and s^-1.
[OK]                ECDSA P256 test vectors (SHA256)                   299   300 - 100-bit r and s^-1.
 ...                ECDSA P256 test vectors (SHA256)                   300   301 - r and s^-1 are close to n.
[OK]                ECDSA P256 test vectors (SHA256)                   300   301 - r and s^-1 are close to n.
 ...                ECDSA P256 test vectors (SHA256)                   301   302 - s == 1.
[OK]                ECDSA P256 test vectors (SHA256)                   301   302 - s == 1.
 ...                ECDSA P256 test vectors (SHA256)                   302   303 - s == 0.
[OK]                ECDSA P256 test vectors (SHA256)                   302   303 - s == 0.
 ...                ECDSA P256 test vectors (SHA256)                   303   304 - point at infinity during verify.
[OK]                ECDSA P256 test vectors (SHA256)                   303   304 - point at infinity during verify.
 ...                ECDSA P256 test vectors (SHA256)                   304   305 - edge case for signature malleability.
[OK]                ECDSA P256 test vectors (SHA256)                   304   305 - edge case for signature malleability.
 ...                ECDSA P256 test vectors (SHA256)                   305   306 - edge case for signature malleability.
[OK]                ECDSA P256 test vectors (SHA256)                   305   306 - edge case for signature malleability.
 ...                ECDSA P256 test vectors (SHA256)                   306   307 - u1 == 1.
[OK]                ECDSA P256 test vectors (SHA256)                   306   307 - u1 == 1.
 ...                ECDSA P256 test vectors (SHA256)                   307   308 - u1 == n - 1.
[OK]                ECDSA P256 test vectors (SHA256)                   307   308 - u1 == n - 1.
 ...                ECDSA P256 test vectors (SHA256)                   308   309 - u2 == 1.
[OK]                ECDSA P256 test vectors (SHA256)                   308   309 - u2 == 1.
 ...                ECDSA P256 test vectors (SHA256)                   309   310 - u2 == n - 1.
[OK]                ECDSA P256 test vectors (SHA256)                   309   310 - u2 == n - 1.
 ...                ECDSA P256 test vectors (SHA256)                   310   311 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA256)                   310   311 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA256)                   311   312 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA256)                   311   312 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA256)                   312   313 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA256)                   312   313 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA256)                   313   314 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA256)                   313   314 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA256)                   314   315 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA256)                   314   315 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA256)                   315   316 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA256)                   315   316 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA256)                   316   317 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA256)                   316   317 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA256)                   317   318 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA256)                   317   318 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA256)                   318   319 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA256)                   318   319 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA256)                   319   320 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA256)                   319   320 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA256)                   320   321 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA256)                   320   321 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA256)                   321   322 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA256)                   321   322 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA256)                   322   323 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA256)                   322   323 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA256)                   323   324 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA256)                   323   324 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA256)                   324   325 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA256)                   324   325 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA256)                   325   326 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA256)                   325   326 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA256)                   326   327 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA256)                   326   327 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA256)                   327   328 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA256)                   327   328 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA256)                   328   329 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA256)                   328   329 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA256)                   329   330 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA256)                   329   330 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA256)                   330   331 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA256)                   330   331 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA256)                   331   332 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA256)                   331   332 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA256)                   332   333 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA256)                   332   333 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA256)                   333   334 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA256)                   333   334 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA256)                   334   335 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA256)                   334   335 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA256)                   335   336 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA256)                   335   336 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA256)                   336   337 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA256)                   336   337 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA256)                   337   338 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA256)                   337   338 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA256)                   338   339 - point duplication during verification.
[OK]                ECDSA P256 test vectors (SHA256)                   338   339 - point duplication during verification.
 ...                ECDSA P256 test vectors (SHA256)                   339   340 - duplication bug.
[OK]                ECDSA P256 test vectors (SHA256)                   339   340 - duplication bug.
 ...                ECDSA P256 test vectors (SHA256)                   340   341 - point with x-coordinate 0.
[OK]                ECDSA P256 test vectors (SHA256)                   340   341 - point with x-coordinate 0.
 ...                ECDSA P256 test vectors (SHA256)                   341   342 - point with x-coordinate 0.
[OK]                ECDSA P256 test vectors (SHA256)                   341   342 - point with x-coordinate 0.
 ...                ECDSA P256 test vectors (SHA256)                   342   343 - comparison with point at infinity .
[OK]                ECDSA P256 test vectors (SHA256)                   342   343 - comparison with point at infinity .
 ...                ECDSA P256 test vectors (SHA256)                   343   344 - extreme value for k and edgecase s.
[OK]                ECDSA P256 test vectors (SHA256)                   343   344 - extreme value for k and edgecase s.
 ...                ECDSA P256 test vectors (SHA256)                   344   345 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA256)                   344   345 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA256)                   345   346 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA256)                   345   346 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA256)                   346   347 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA256)                   346   347 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA256)                   347   348 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA256)                   347   348 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA256)                   348   349 - extreme value for k.
[OK]                ECDSA P256 test vectors (SHA256)                   348   349 - extreme value for k.
 ...                ECDSA P256 test vectors (SHA256)                   349   350 - extreme value for k and edgecase s.
[OK]                ECDSA P256 test vectors (SHA256)                   349   350 - extreme value for k and edgecase s.
 ...                ECDSA P256 test vectors (SHA256)                   350   351 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA256)                   350   351 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA256)                   351   352 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA256)                   351   352 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA256)                   352   353 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA256)                   352   353 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA256)                   353   354 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA256)                   353   354 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA256)                   354   355 - extreme value for k.
[OK]                ECDSA P256 test vectors (SHA256)                   354   355 - extreme value for k.
 ...                ECDSA P256 test vectors (SHA256)                   355   356 - testing point duplication.
[OK]                ECDSA P256 test vectors (SHA256)                   355   356 - testing point duplication.
 ...                ECDSA P256 test vectors (SHA256)                   356   357 - testing point duplication.
[OK]                ECDSA P256 test vectors (SHA256)                   356   357 - testing point duplication.
 ...                ECDSA P256 test vectors (SHA256)                   357   358 - testing point duplication.
[OK]                ECDSA P256 test vectors (SHA256)                   357   358 - testing point duplication.
 ...                ECDSA P256 test vectors (SHA256)                   358   359 - testing point duplication.
[OK]                ECDSA P256 test vectors (SHA256)                   358   359 - testing point duplication.
 ...                ECDSA P256 test vectors (SHA256)                   359   360 - pseudorandom signature.
[OK]                ECDSA P256 test vectors (SHA256)                   359   360 - pseudorandom signature.
 ...                ECDSA P256 test vectors (SHA256)                   360   361 - pseudorandom signature.
[OK]                ECDSA P256 test vectors (SHA256)                   360   361 - pseudorandom signature.
 ...                ECDSA P256 test vectors (SHA256)                   361   362 - pseudorandom signature.
[OK]                ECDSA P256 test vectors (SHA256)                   361   362 - pseudorandom signature.
 ...                ECDSA P256 test vectors (SHA256)                   362   363 - pseudorandom signature.
[OK]                ECDSA P256 test vectors (SHA256)                   362   363 - pseudorandom signature.
 ...                ECDSA P256 test vectors (SHA256)                   363   364 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P256 test vectors (SHA256)                   363   364 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA P256 test vectors (SHA256)                   364   365 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P256 test vectors (SHA256)                   364   365 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA P256 test vectors (SHA256)                   365   366 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P256 test vectors (SHA256)                   365   366 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA P256 test vectors (SHA256)                   366   367 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P256 test vectors (SHA256)                   366   367 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA P256 test vectors (SHA256)                   367   368 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P256 test vectors (SHA256)                   367   368 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA P256 test vectors (SHA256)                   368   369 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P256 test vectors (SHA256)                   368   369 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA P256 test vectors (SHA256)                   369   370 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P256 test vectors (SHA256)                   369   370 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA P256 test vectors (SHA256)                   370   371 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P256 test vectors (SHA256)                   370   371 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA P256 test vectors (SHA256)                   371   372 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P256 test vectors (SHA256)                   371   372 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA P256 test vectors (SHA256)                   372   373 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P256 test vectors (SHA256)                   372   373 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA P256 test vectors (SHA256)                   373   374 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P256 test vectors (SHA256)                   373   374 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA P256 test vectors (SHA256)                   374   375 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P256 test vectors (SHA256)                   374   375 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA P256 test vectors (SHA256)                   375   376 - x-coordinate of the public key is large.
[OK]                ECDSA P256 test vectors (SHA256)                   375   376 - x-coordinate of the public key is large.
 ...                ECDSA P256 test vectors (SHA256)                   376   377 - x-coordinate of the public key is large.
[OK]                ECDSA P256 test vectors (SHA256)                   376   377 - x-coordinate of the public key is large.
 ...                ECDSA P256 test vectors (SHA256)                   377   378 - x-coordinate of the public key is large.
[OK]                ECDSA P256 test vectors (SHA256)                   377   378 - x-coordinate of the public key is large.
 ...                ECDSA P256 test vectors (SHA256)                   378   379 - x-coordinate of the public key is small.
[OK]                ECDSA P256 test vectors (SHA256)                   378   379 - x-coordinate of the public key is small.
 ...                ECDSA P256 test vectors (SHA256)                   379   380 - x-coordinate of the public key is small.
[OK]                ECDSA P256 test vectors (SHA256)                   379   380 - x-coordinate of the public key is small.
 ...                ECDSA P256 test vectors (SHA256)                   380   381 - x-coordinate of the public key is small.
[OK]                ECDSA P256 test vectors (SHA256)                   380   381 - x-coordinate of the public key is small.
 ...                ECDSA P256 test vectors (SHA256)                   381   382 - y-coordinate of the public key is small.
[OK]                ECDSA P256 test vectors (SHA256)                   381   382 - y-coordinate of the public key is small.
 ...                ECDSA P256 test vectors (SHA256)                   382   383 - y-coordinate of the public key is small.
[OK]                ECDSA P256 test vectors (SHA256)                   382   383 - y-coordinate of the public key is small.
 ...                ECDSA P256 test vectors (SHA256)                   383   384 - y-coordinate of the public key is small.
[OK]                ECDSA P256 test vectors (SHA256)                   383   384 - y-coordinate of the public key is small.
 ...                ECDSA P256 test vectors (SHA256)                   384   385 - y-coordinate of the public key is large.
[OK]                ECDSA P256 test vectors (SHA256)                   384   385 - y-coordinate of the public key is large.
 ...                ECDSA P256 test vectors (SHA256)                   385   386 - y-coordinate of the public key is large.
[OK]                ECDSA P256 test vectors (SHA256)                   385   386 - y-coordinate of the public key is large.
 ...                ECDSA P256 test vectors (SHA256)                   386   387 - y-coordinate of the public key is large.
[OK]                ECDSA P256 test vectors (SHA256)                   386   387 - y-coordinate of the public key is large.
 ...                ECDSA P256 test vectors (SHA512)                     0   1 - signature malleability.
[OK]                ECDSA P256 test vectors (SHA512)                     0   1 - signature malleability.
 ...                ECDSA P256 test vectors (SHA512)                     1   2 - Legacy:ASN encoding of s misses leading 0.
[OK]                ECDSA P256 test vectors (SHA512)                     1   2 - Legacy:ASN encoding of s misses leading 0.
 ...                ECDSA P256 test vectors (SHA512)                     2   3 - valid.
[OK]                ECDSA P256 test vectors (SHA512)                     2   3 - valid.
 ...                ECDSA P256 test vectors (SHA512)                     3   4 - long form encoding of length of sequence.
[OK]                ECDSA P256 test vectors (SHA512)                     3   4 - long form encoding of length of sequence.
 ...                ECDSA P256 test vectors (SHA512)                     4   5 - length of sequence contains leading 0.
[OK]                ECDSA P256 test vectors (SHA512)                     4   5 - length of sequence contains leading 0.
 ...                ECDSA P256 test vectors (SHA512)                     5   6 - wrong length of sequence.
[OK]                ECDSA P256 test vectors (SHA512)                     5   6 - wrong length of sequence.
 ...                ECDSA P256 test vectors (SHA512)                     6   7 - wrong length of sequence.
[OK]                ECDSA P256 test vectors (SHA512)                     6   7 - wrong length of sequence.
 ...                ECDSA P256 test vectors (SHA512)                     7   8 - uint32 overflow in length of sequence.
[OK]                ECDSA P256 test vectors (SHA512)                     7   8 - uint32 overflow in length of sequence.
 ...                ECDSA P256 test vectors (SHA512)                     8   9 - uint64 overflow in length of sequence.
[OK]                ECDSA P256 test vectors (SHA512)                     8   9 - uint64 overflow in length of sequence.
 ...                ECDSA P256 test vectors (SHA512)                     9   10 - length of sequence = 2**31 - 1.
[OK]                ECDSA P256 test vectors (SHA512)                     9   10 - length of sequence = 2**31 - 1.
 ...                ECDSA P256 test vectors (SHA512)                    10   11 - length of sequence = 2**32 - 1.
[OK]                ECDSA P256 test vectors (SHA512)                    10   11 - length of sequence = 2**32 - 1.
 ...                ECDSA P256 test vectors (SHA512)                    11   12 - length of sequence = 2**40 - 1.
[OK]                ECDSA P256 test vectors (SHA512)                    11   12 - length of sequence = 2**40 - 1.
 ...                ECDSA P256 test vectors (SHA512)                    12   13 - length of sequence = 2**64 - 1.
[OK]                ECDSA P256 test vectors (SHA512)                    12   13 - length of sequence = 2**64 - 1.
 ...                ECDSA P256 test vectors (SHA512)                    13   14 - incorrect length of sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    13   14 - incorrect length of sequence.
 ...                ECDSA P256 test vectors (SHA512)                    14   15 - indefinite length without termination.
[OK]                ECDSA P256 test vectors (SHA512)                    14   15 - indefinite length without termination.
 ...                ECDSA P256 test vectors (SHA512)                    15   16 - indefinite length without termination.
[OK]                ECDSA P256 test vectors (SHA512)                    15   16 - indefinite length without termination.
 ...                ECDSA P256 test vectors (SHA512)                    16   17 - indefinite length without termination.
[OK]                ECDSA P256 test vectors (SHA512)                    16   17 - indefinite length without termination.
 ...                ECDSA P256 test vectors (SHA512)                    17   18 - removing sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    17   18 - removing sequence.
 ...                ECDSA P256 test vectors (SHA512)                    18   19 - lonely sequence tag.
[OK]                ECDSA P256 test vectors (SHA512)                    18   19 - lonely sequence tag.
 ...                ECDSA P256 test vectors (SHA512)                    19   20 - appending 0's to sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    19   20 - appending 0's to sequence.
 ...                ECDSA P256 test vectors (SHA512)                    20   21 - prepending 0's to sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    20   21 - prepending 0's to sequence.
 ...                ECDSA P256 test vectors (SHA512)                    21   22 - appending unused 0's to sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    21   22 - appending unused 0's to sequence.
 ...                ECDSA P256 test vectors (SHA512)                    22   23 - appending null value to sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    22   23 - appending null value to sequence.
 ...                ECDSA P256 test vectors (SHA512)                    23   24 - including garbage.
[OK]                ECDSA P256 test vectors (SHA512)                    23   24 - including garbage.
 ...                ECDSA P256 test vectors (SHA512)                    24   25 - including garbage.
[OK]                ECDSA P256 test vectors (SHA512)                    24   25 - including garbage.
 ...                ECDSA P256 test vectors (SHA512)                    25   26 - including garbage.
[OK]                ECDSA P256 test vectors (SHA512)                    25   26 - including garbage.
 ...                ECDSA P256 test vectors (SHA512)                    26   27 - including garbage.
[OK]                ECDSA P256 test vectors (SHA512)                    26   27 - including garbage.
 ...                ECDSA P256 test vectors (SHA512)                    27   28 - including garbage.
[OK]                ECDSA P256 test vectors (SHA512)                    27   28 - including garbage.
 ...                ECDSA P256 test vectors (SHA512)                    28   29 - including garbage.
[OK]                ECDSA P256 test vectors (SHA512)                    28   29 - including garbage.
 ...                ECDSA P256 test vectors (SHA512)                    29   30 - including garbage.
[OK]                ECDSA P256 test vectors (SHA512)                    29   30 - including garbage.
 ...                ECDSA P256 test vectors (SHA512)                    30   31 - including garbage.
[OK]                ECDSA P256 test vectors (SHA512)                    30   31 - including garbage.
 ...                ECDSA P256 test vectors (SHA512)                    31   32 - including garbage.
[OK]                ECDSA P256 test vectors (SHA512)                    31   32 - including garbage.
 ...                ECDSA P256 test vectors (SHA512)                    32   33 - including undefined tags.
[OK]                ECDSA P256 test vectors (SHA512)                    32   33 - including undefined tags.
 ...                ECDSA P256 test vectors (SHA512)                    33   34 - including undefined tags.
[OK]                ECDSA P256 test vectors (SHA512)                    33   34 - including undefined tags.
 ...                ECDSA P256 test vectors (SHA512)                    34   35 - including undefined tags.
[OK]                ECDSA P256 test vectors (SHA512)                    34   35 - including undefined tags.
 ...                ECDSA P256 test vectors (SHA512)                    35   36 - including undefined tags.
[OK]                ECDSA P256 test vectors (SHA512)                    35   36 - including undefined tags.
 ...                ECDSA P256 test vectors (SHA512)                    36   37 - including undefined tags.
[OK]                ECDSA P256 test vectors (SHA512)                    36   37 - including undefined tags.
 ...                ECDSA P256 test vectors (SHA512)                    37   38 - including undefined tags.
[OK]                ECDSA P256 test vectors (SHA512)                    37   38 - including undefined tags.
 ...                ECDSA P256 test vectors (SHA512)                    38   39 - truncated length of sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    38   39 - truncated length of sequence.
 ...                ECDSA P256 test vectors (SHA512)                    39   40 - using composition with indefinite length.
[OK]                ECDSA P256 test vectors (SHA512)                    39   40 - using composition with indefinite length.
 ...                ECDSA P256 test vectors (SHA512)                    40   41 - using composition with indefinite length.
[OK]                ECDSA P256 test vectors (SHA512)                    40   41 - using composition with indefinite length.
 ...                ECDSA P256 test vectors (SHA512)                    41   42 - using composition with indefinite length.
[OK]                ECDSA P256 test vectors (SHA512)                    41   42 - using composition with indefinite length.
 ...                ECDSA P256 test vectors (SHA512)                    42   43 - using composition with wrong tag.
[OK]                ECDSA P256 test vectors (SHA512)                    42   43 - using composition with wrong tag.
 ...                ECDSA P256 test vectors (SHA512)                    43   44 - using composition with wrong tag.
[OK]                ECDSA P256 test vectors (SHA512)                    43   44 - using composition with wrong tag.
 ...                ECDSA P256 test vectors (SHA512)                    44   45 - using composition with wrong tag.
[OK]                ECDSA P256 test vectors (SHA512)                    44   45 - using composition with wrong tag.
 ...                ECDSA P256 test vectors (SHA512)                    45   46 - Replacing sequence with NULL.
[OK]                ECDSA P256 test vectors (SHA512)                    45   46 - Replacing sequence with NULL.
 ...                ECDSA P256 test vectors (SHA512)                    46   47 - changing tag value of sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    46   47 - changing tag value of sequence.
 ...                ECDSA P256 test vectors (SHA512)                    47   48 - changing tag value of sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    47   48 - changing tag value of sequence.
 ...                ECDSA P256 test vectors (SHA512)                    48   49 - changing tag value of sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    48   49 - changing tag value of sequence.
 ...                ECDSA P256 test vectors (SHA512)                    49   50 - changing tag value of sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    49   50 - changing tag value of sequence.
 ...                ECDSA P256 test vectors (SHA512)                    50   51 - changing tag value of sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    50   51 - changing tag value of sequence.
 ...                ECDSA P256 test vectors (SHA512)                    51   52 - dropping value of sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    51   52 - dropping value of sequence.
 ...                ECDSA P256 test vectors (SHA512)                    52   53 - using composition for sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    52   53 - using composition for sequence.
 ...                ECDSA P256 test vectors (SHA512)                    53   54 - truncated sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    53   54 - truncated sequence.
 ...                ECDSA P256 test vectors (SHA512)                    54   55 - truncated sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    54   55 - truncated sequence.
 ...                ECDSA P256 test vectors (SHA512)                    55   56 - indefinite length.
[OK]                ECDSA P256 test vectors (SHA512)                    55   56 - indefinite length.
 ...                ECDSA P256 test vectors (SHA512)                    56   57 - indefinite length with truncated delimiter.
[OK]                ECDSA P256 test vectors (SHA512)                    56   57 - indefinite length with truncated delimiter.
 ...                ECDSA P256 test vectors (SHA512)                    57   58 - indefinite length with additional element.
[OK]                ECDSA P256 test vectors (SHA512)                    57   58 - indefinite length with additional element.
 ...                ECDSA P256 test vectors (SHA512)                    58   59 - indefinite length with truncated element.
[OK]                ECDSA P256 test vectors (SHA512)                    58   59 - indefinite length with truncated element.
 ...                ECDSA P256 test vectors (SHA512)                    59   60 - indefinite length with garbage.
[OK]                ECDSA P256 test vectors (SHA512)                    59   60 - indefinite length with garbage.
 ...                ECDSA P256 test vectors (SHA512)                    60   61 - indefinite length with nonempty EOC.
[OK]                ECDSA P256 test vectors (SHA512)                    60   61 - indefinite length with nonempty EOC.
 ...                ECDSA P256 test vectors (SHA512)                    61   62 - prepend empty sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    61   62 - prepend empty sequence.
 ...                ECDSA P256 test vectors (SHA512)                    62   63 - append empty sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    62   63 - append empty sequence.
 ...                ECDSA P256 test vectors (SHA512)                    63   64 - append garbage with high tag number.
[OK]                ECDSA P256 test vectors (SHA512)                    63   64 - append garbage with high tag number.
 ...                ECDSA P256 test vectors (SHA512)                    64   65 - sequence of sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    64   65 - sequence of sequence.
 ...                ECDSA P256 test vectors (SHA512)                    65   66 - truncated sequence: removed last 1 elements.
[OK]                ECDSA P256 test vectors (SHA512)                    65   66 - truncated sequence: removed last 1 elements.
 ...                ECDSA P256 test vectors (SHA512)                    66   67 - repeating element in sequence.
[OK]                ECDSA P256 test vectors (SHA512)                    66   67 - repeating element in sequence.
 ...                ECDSA P256 test vectors (SHA512)                    67   68 - long form encoding of length of integer.
[OK]                ECDSA P256 test vectors (SHA512)                    67   68 - long form encoding of length of integer.
 ...                ECDSA P256 test vectors (SHA512)                    68   69 - long form encoding of length of integer.
[OK]                ECDSA P256 test vectors (SHA512)                    68   69 - long form encoding of length of integer.
 ...                ECDSA P256 test vectors (SHA512)                    69   70 - length of integer contains leading 0.
[OK]                ECDSA P256 test vectors (SHA512)                    69   70 - length of integer contains leading 0.
 ...                ECDSA P256 test vectors (SHA512)                    70   71 - length of integer contains leading 0.
[OK]                ECDSA P256 test vectors (SHA512)                    70   71 - length of integer contains leading 0.
 ...                ECDSA P256 test vectors (SHA512)                    71   72 - wrong length of integer.
[OK]                ECDSA P256 test vectors (SHA512)                    71   72 - wrong length of integer.
 ...                ECDSA P256 test vectors (SHA512)                    72   73 - wrong length of integer.
[OK]                ECDSA P256 test vectors (SHA512)                    72   73 - wrong length of integer.
 ...                ECDSA P256 test vectors (SHA512)                    73   74 - wrong length of integer.
[OK]                ECDSA P256 test vectors (SHA512)                    73   74 - wrong length of integer.
 ...                ECDSA P256 test vectors (SHA512)                    74   75 - wrong length of integer.
[OK]                ECDSA P256 test vectors (SHA512)                    74   75 - wrong length of integer.
 ...                ECDSA P256 test vectors (SHA512)                    75   76 - uint32 overflow in length of integer.
[OK]                ECDSA P256 test vectors (SHA512)                    75   76 - uint32 overflow in length of integer.
 ...                ECDSA P256 test vectors (SHA512)                    76   77 - uint32 overflow in length of integer.
[OK]                ECDSA P256 test vectors (SHA512)                    76   77 - uint32 overflow in length of integer.
 ...                ECDSA P256 test vectors (SHA512)                    77   78 - uint64 overflow in length of integer.
[OK]                ECDSA P256 test vectors (SHA512)                    77   78 - uint64 overflow in length of integer.
 ...                ECDSA P256 test vectors (SHA512)                    78   79 - uint64 overflow in length of integer.
[OK]                ECDSA P256 test vectors (SHA512)                    78   79 - uint64 overflow in length of integer.
 ...                ECDSA P256 test vectors (SHA512)                    79   80 - length of integer = 2**31 - 1.
[OK]                ECDSA P256 test vectors (SHA512)                    79   80 - length of integer = 2**31 - 1.
 ...                ECDSA P256 test vectors (SHA512)                    80   81 - length of integer = 2**31 - 1.
[OK]                ECDSA P256 test vectors (SHA512)                    80   81 - length of integer = 2**31 - 1.
 ...                ECDSA P256 test vectors (SHA512)                    81   82 - length of integer = 2**32 - 1.
[OK]                ECDSA P256 test vectors (SHA512)                    81   82 - length of integer = 2**32 - 1.
 ...                ECDSA P256 test vectors (SHA512)                    82   83 - length of integer = 2**32 - 1.
[OK]                ECDSA P256 test vectors (SHA512)                    82   83 - length of integer = 2**32 - 1.
 ...                ECDSA P256 test vectors (SHA512)                    83   84 - length of integer = 2**40 - 1.
[OK]                ECDSA P256 test vectors (SHA512)                    83   84 - length of integer = 2**40 - 1.
 ...                ECDSA P256 test vectors (SHA512)                    84   85 - length of integer = 2**40 - 1.
[OK]                ECDSA P256 test vectors (SHA512)                    84   85 - length of integer = 2**40 - 1.
 ...                ECDSA P256 test vectors (SHA512)                    85   86 - length of integer = 2**64 - 1.
[OK]                ECDSA P256 test vectors (SHA512)                    85   86 - length of integer = 2**64 - 1.
 ...                ECDSA P256 test vectors (SHA512)                    86   87 - length of integer = 2**64 - 1.
[OK]                ECDSA P256 test vectors (SHA512)                    86   87 - length of integer = 2**64 - 1.
 ...                ECDSA P256 test vectors (SHA512)                    87   88 - incorrect length of integer.
[OK]                ECDSA P256 test vectors (SHA512)                    87   88 - incorrect length of integer.
 ...                ECDSA P256 test vectors (SHA512)                    88   89 - incorrect length of integer.
[OK]                ECDSA P256 test vectors (SHA512)                    88   89 - incorrect length of integer.
 ...                ECDSA P256 test vectors (SHA512)                    89   90 - removing integer.
[OK]                ECDSA P256 test vectors (SHA512)                    89   90 - removing integer.
 ...                ECDSA P256 test vectors (SHA512)                    90   91 - lonely integer tag.
[OK]                ECDSA P256 test vectors (SHA512)                    90   91 - lonely integer tag.
 ...                ECDSA P256 test vectors (SHA512)                    91   92 - lonely integer tag.
[OK]                ECDSA P256 test vectors (SHA512)                    91   92 - lonely integer tag.
 ...                ECDSA P256 test vectors (SHA512)                    92   93 - appending 0's to integer.
[OK]                ECDSA P256 test vectors (SHA512)                    92   93 - appending 0's to integer.
 ...                ECDSA P256 test vectors (SHA512)                    93   94 - appending 0's to integer.
[OK]                ECDSA P256 test vectors (SHA512)                    93   94 - appending 0's to integer.
 ...                ECDSA P256 test vectors (SHA512)                    94   95 - prepending 0's to integer.
[OK]                ECDSA P256 test vectors (SHA512)                    94   95 - prepending 0's to integer.
 ...                ECDSA P256 test vectors (SHA512)                    95   96 - prepending 0's to integer.
[OK]                ECDSA P256 test vectors (SHA512)                    95   96 - prepending 0's to integer.
 ...                ECDSA P256 test vectors (SHA512)                    96   97 - appending unused 0's to integer.
[OK]                ECDSA P256 test vectors (SHA512)                    96   97 - appending unused 0's to integer.
 ...                ECDSA P256 test vectors (SHA512)                    97   98 - appending null value to integer.
[OK]                ECDSA P256 test vectors (SHA512)                    97   98 - appending null value to integer.
 ...                ECDSA P256 test vectors (SHA512)                    98   99 - appending null value to integer.
[OK]                ECDSA P256 test vectors (SHA512)                    98   99 - appending null value to integer.
 ...                ECDSA P256 test vectors (SHA512)                    99   100 - truncated length of integer.
[OK]                ECDSA P256 test vectors (SHA512)                    99   100 - truncated length of integer.
 ...                ECDSA P256 test vectors (SHA512)                   100   101 - truncated length of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   100   101 - truncated length of integer.
 ...                ECDSA P256 test vectors (SHA512)                   101   102 - Replacing integer with NULL.
[OK]                ECDSA P256 test vectors (SHA512)                   101   102 - Replacing integer with NULL.
 ...                ECDSA P256 test vectors (SHA512)                   102   103 - Replacing integer with NULL.
[OK]                ECDSA P256 test vectors (SHA512)                   102   103 - Replacing integer with NULL.
 ...                ECDSA P256 test vectors (SHA512)                   103   104 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   103   104 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA512)                   104   105 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   104   105 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA512)                   105   106 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   105   106 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA512)                   106   107 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   106   107 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA512)                   107   108 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   107   108 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA512)                   108   109 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   108   109 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA512)                   109   110 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   109   110 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA512)                   110   111 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   110   111 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA512)                   111   112 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   111   112 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA512)                   112   113 - changing tag value of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   112   113 - changing tag value of integer.
 ...                ECDSA P256 test vectors (SHA512)                   113   114 - dropping value of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   113   114 - dropping value of integer.
 ...                ECDSA P256 test vectors (SHA512)                   114   115 - dropping value of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   114   115 - dropping value of integer.
 ...                ECDSA P256 test vectors (SHA512)                   115   116 - using composition for integer.
[OK]                ECDSA P256 test vectors (SHA512)                   115   116 - using composition for integer.
 ...                ECDSA P256 test vectors (SHA512)                   116   117 - using composition for integer.
[OK]                ECDSA P256 test vectors (SHA512)                   116   117 - using composition for integer.
 ...                ECDSA P256 test vectors (SHA512)                   117   118 - modify first byte of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   117   118 - modify first byte of integer.
 ...                ECDSA P256 test vectors (SHA512)                   118   119 - modify first byte of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   118   119 - modify first byte of integer.
 ...                ECDSA P256 test vectors (SHA512)                   119   120 - modify last byte of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   119   120 - modify last byte of integer.
 ...                ECDSA P256 test vectors (SHA512)                   120   121 - modify last byte of integer.
[OK]                ECDSA P256 test vectors (SHA512)                   120   121 - modify last byte of integer.
 ...                ECDSA P256 test vectors (SHA512)                   121   122 - truncated integer.
[OK]                ECDSA P256 test vectors (SHA512)                   121   122 - truncated integer.
 ...                ECDSA P256 test vectors (SHA512)                   122   123 - truncated integer.
[OK]                ECDSA P256 test vectors (SHA512)                   122   123 - truncated integer.
 ...                ECDSA P256 test vectors (SHA512)                   123   124 - truncated integer.
[OK]                ECDSA P256 test vectors (SHA512)                   123   124 - truncated integer.
 ...                ECDSA P256 test vectors (SHA512)                   124   125 - leading ff in integer.
[OK]                ECDSA P256 test vectors (SHA512)                   124   125 - leading ff in integer.
 ...                ECDSA P256 test vectors (SHA512)                   125   126 - leading ff in integer.
[OK]                ECDSA P256 test vectors (SHA512)                   125   126 - leading ff in integer.
 ...                ECDSA P256 test vectors (SHA512)                   126   127 - replaced integer by infinity.
[OK]                ECDSA P256 test vectors (SHA512)                   126   127 - replaced integer by infinity.
 ...                ECDSA P256 test vectors (SHA512)                   127   128 - replaced integer by infinity.
[OK]                ECDSA P256 test vectors (SHA512)                   127   128 - replaced integer by infinity.
 ...                ECDSA P256 test vectors (SHA512)                   128   129 - replacing integer with zero.
[OK]                ECDSA P256 test vectors (SHA512)                   128   129 - replacing integer with zero.
 ...                ECDSA P256 test vectors (SHA512)                   129   130 - replacing integer with zero.
[OK]                ECDSA P256 test vectors (SHA512)                   129   130 - replacing integer with zero.
 ...                ECDSA P256 test vectors (SHA512)                   130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA512)                   130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA512)                   131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA512)                   131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA512)                   132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA512)                   132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA512)                   133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA512)                   133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA512)                   134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA512)                   134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA512)                   135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA512)                   135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA512)                   136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA512)                   136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA512)                   137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA512)                   137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA512)                   138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA512)                   138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA512)                   139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA512)                   139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA512)                   140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA512)                   140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA512)                   141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA512)                   141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA512)                   142   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P256 test vectors (SHA512)                   142   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P256 test vectors (SHA512)                   143   144 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   143   144 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   144   145 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   144   145 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   145   146 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   145   146 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   146   147 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   146   147 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   147   148 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   147   148 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   148   149 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   148   149 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   149   150 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   149   150 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   150   151 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   150   151 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   151   152 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   151   152 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   152   153 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   152   153 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   153   154 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   153   154 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   154   155 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   154   155 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   155   156 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   155   156 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   156   157 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   156   157 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   157   158 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   157   158 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   158   159 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   158   159 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   159   160 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   159   160 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   160   161 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   160   161 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   161   162 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   161   162 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   162   163 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   162   163 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   163   164 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   163   164 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   164   165 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   164   165 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   165   166 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   165   166 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   166   167 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   166   167 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   167   168 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   167   168 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   168   169 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   168   169 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   169   170 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   169   170 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   170   171 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   170   171 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   171   172 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   171   172 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   172   173 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   172   173 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   173   174 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   173   174 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   174   175 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   174   175 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   175   176 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   175   176 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   176   177 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   176   177 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   177   178 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   177   178 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   178   179 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   178   179 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   179   180 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   179   180 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   180   181 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   180   181 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   181   182 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   181   182 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   182   183 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   182   183 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   183   184 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   183   184 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   184   185 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   184   185 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   185   186 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   185   186 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   186   187 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   186   187 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   187   188 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   187   188 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   188   189 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   188   189 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   189   190 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   189   190 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   190   191 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   190   191 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   191   192 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   191   192 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   192   193 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   192   193 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   193   194 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   193   194 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   194   195 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   194   195 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   195   196 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   195   196 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   196   197 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   196   197 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   197   198 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   197   198 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   198   199 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   198   199 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   199   200 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   199   200 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   200   201 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   200   201 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   201   202 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   201   202 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   202   203 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   202   203 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   203   204 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   203   204 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   204   205 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   204   205 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   205   206 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   205   206 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   206   207 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   206   207 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   207   208 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   207   208 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   208   209 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   208   209 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   209   210 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   209   210 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   210   211 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   210   211 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   211   212 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   211   212 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   212   213 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   212   213 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   213   214 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   213   214 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   214   215 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   214   215 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   215   216 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   215   216 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   216   217 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   216   217 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   217   218 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   217   218 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   218   219 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   218   219 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   219   220 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   219   220 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   220   221 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   220   221 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   221   222 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   221   222 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   222   223 - Signature with special case values for r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   222   223 - Signature with special case values for r and s.
 ...                ECDSA P256 test vectors (SHA512)                   223   224 - Signature encoding contains wrong types.
[OK]                ECDSA P256 test vectors (SHA512)                   223   224 - Signature encoding contains wrong types.
 ...                ECDSA P256 test vectors (SHA512)                   224   225 - Signature encoding contains wrong types.
[OK]                ECDSA P256 test vectors (SHA512)                   224   225 - Signature encoding contains wrong types.
 ...                ECDSA P256 test vectors (SHA512)                   225   226 - Signature encoding contains wrong types.
[OK]                ECDSA P256 test vectors (SHA512)                   225   226 - Signature encoding contains wrong types.
 ...                ECDSA P256 test vectors (SHA512)                   226   227 - Signature encoding contains wrong types.
[OK]                ECDSA P256 test vectors (SHA512)                   226   227 - Signature encoding contains wrong types.
 ...                ECDSA P256 test vectors (SHA512)                   227   228 - Signature encoding contains wrong types.
[OK]                ECDSA P256 test vectors (SHA512)                   227   228 - Signature encoding contains wrong types.
 ...                ECDSA P256 test vectors (SHA512)                   228   229 - Signature encoding contains wrong types.
[OK]                ECDSA P256 test vectors (SHA512)                   228   229 - Signature encoding contains wrong types.
 ...                ECDSA P256 test vectors (SHA512)                   229   230 - Edge case for Shamir multiplication.
[OK]                ECDSA P256 test vectors (SHA512)                   229   230 - Edge case for Shamir multiplication.
 ...                ECDSA P256 test vectors (SHA512)                   230   231 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   230   231 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   231   232 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   231   232 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   232   233 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   232   233 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   233   234 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   233   234 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   234   235 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   234   235 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   235   236 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   235   236 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   236   237 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   236   237 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   237   238 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   237   238 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   238   239 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   238   239 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   239   240 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   239   240 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   240   241 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   240   241 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   241   242 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   241   242 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   242   243 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   242   243 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   243   244 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   243   244 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   244   245 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   244   245 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   245   246 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   245   246 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   246   247 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   246   247 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   247   248 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   247   248 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   248   249 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   248   249 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   249   250 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   249   250 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   250   251 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   250   251 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   251   252 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   251   252 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   252   253 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   252   253 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   253   254 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   253   254 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   254   255 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   254   255 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   255   256 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   255   256 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   256   257 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   256   257 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   257   258 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   257   258 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   258   259 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   258   259 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   259   260 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   259   260 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   260   261 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   260   261 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   261   262 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   261   262 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   262   263 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   262   263 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   263   264 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   263   264 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   264   265 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   264   265 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   265   266 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   265   266 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   266   267 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   266   267 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   267   268 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   267   268 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   268   269 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   268   269 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   269   270 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   269   270 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   270   271 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   270   271 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   271   272 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   271   272 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   272   273 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   272   273 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   273   274 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   273   274 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   274   275 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   274   275 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   275   276 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   275   276 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   276   277 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   276   277 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   277   278 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   277   278 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   278   279 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   278   279 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   279   280 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   279   280 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   280   281 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   280   281 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   281   282 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   281   282 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   282   283 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   282   283 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   283   284 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   283   284 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   284   285 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   284   285 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   285   286 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   285   286 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   286   287 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   286   287 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   287   288 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   287   288 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   288   289 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   288   289 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   289   290 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   289   290 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   290   291 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   290   291 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   291   292 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   291   292 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   292   293 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   292   293 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   293   294 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   293   294 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   294   295 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   294   295 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   295   296 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   295   296 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   296   297 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   296   297 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   297   298 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   297   298 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   298   299 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   298   299 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   299   300 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   299   300 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   300   301 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   300   301 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   301   302 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   301   302 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   302   303 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   302   303 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   303   304 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   303   304 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   304   305 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   304   305 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   305   306 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   305   306 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   306   307 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   306   307 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   307   308 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   307   308 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   308   309 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   308   309 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   309   310 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   309   310 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   310   311 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   310   311 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   311   312 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   311   312 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   312   313 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   312   313 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   313   314 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   313   314 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   314   315 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   314   315 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   315   316 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   315   316 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   316   317 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   316   317 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   317   318 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   317   318 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   318   319 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   318   319 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   319   320 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   319   320 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   320   321 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   320   321 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   321   322 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   321   322 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   322   323 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   322   323 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   323   324 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   323   324 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   324   325 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   324   325 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   325   326 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   325   326 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   326   327 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   326   327 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   327   328 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   327   328 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   328   329 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   328   329 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   329   330 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   329   330 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   330   331 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   330   331 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   331   332 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   331   332 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   332   333 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   332   333 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   333   334 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   333   334 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   334   335 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   334   335 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   335   336 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   335   336 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   336   337 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   336   337 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   337   338 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   337   338 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   338   339 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   338   339 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   339   340 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   339   340 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   340   341 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   340   341 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   341   342 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   341   342 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   342   343 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   342   343 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   343   344 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   343   344 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   344   345 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   344   345 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   345   346 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   345   346 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   346   347 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   346   347 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   347   348 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   347   348 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   348   349 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   348   349 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   349   350 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   349   350 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   350   351 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   350   351 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   351   352 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   351   352 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   352   353 - special case hash.
[OK]                ECDSA P256 test vectors (SHA512)                   352   353 - special case hash.
 ...                ECDSA P256 test vectors (SHA512)                   353   354 - Signature generated without truncating the hash.
[OK]                ECDSA P256 test vectors (SHA512)                   353   354 - Signature generated without truncating the hash.
 ...                ECDSA P256 test vectors (SHA512)                   354   355 - k*G has a large x-coordinate.
[OK]                ECDSA P256 test vectors (SHA512)                   354   355 - k*G has a large x-coordinate.
 ...                ECDSA P256 test vectors (SHA512)                   355   356 - r too large.
[OK]                ECDSA P256 test vectors (SHA512)                   355   356 - r too large.
 ...                ECDSA P256 test vectors (SHA512)                   356   357 - r,s are large.
[OK]                ECDSA P256 test vectors (SHA512)                   356   357 - r,s are large.
 ...                ECDSA P256 test vectors (SHA512)                   357   358 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA P256 test vectors (SHA512)                   357   358 - r and s^-1 have a large Hamming weight.
 ...                ECDSA P256 test vectors (SHA512)                   358   359 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA P256 test vectors (SHA512)                   358   359 - r and s^-1 have a large Hamming weight.
 ...                ECDSA P256 test vectors (SHA512)                   359   360 - small r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   359   360 - small r and s.
 ...                ECDSA P256 test vectors (SHA512)                   360   361 - small r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   360   361 - small r and s.
 ...                ECDSA P256 test vectors (SHA512)                   361   362 - small r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   361   362 - small r and s.
 ...                ECDSA P256 test vectors (SHA512)                   362   363 - small r and s.
[OK]                ECDSA P256 test vectors (SHA512)                   362   363 - small r and s.
 ...                ECDSA P256 test vectors (SHA512)                   363   364 - r is larger than n.
[OK]                ECDSA P256 test vectors (SHA512)                   363   364 - r is larger than n.
 ...                ECDSA P256 test vectors (SHA512)                   364   365 - s is larger than n.
[OK]                ECDSA P256 test vectors (SHA512)                   364   365 - s is larger than n.
 ...                ECDSA P256 test vectors (SHA512)                   365   366 - small r and s^-1.
[OK]                ECDSA P256 test vectors (SHA512)                   365   366 - small r and s^-1.
 ...                ECDSA P256 test vectors (SHA512)                   366   367 - smallish r and s^-1.
[OK]                ECDSA P256 test vectors (SHA512)                   366   367 - smallish r and s^-1.
 ...                ECDSA P256 test vectors (SHA512)                   367   368 - 100-bit r and small s^-1.
[OK]                ECDSA P256 test vectors (SHA512)                   367   368 - 100-bit r and small s^-1.
 ...                ECDSA P256 test vectors (SHA512)                   368   369 - small r and 100 bit s^-1.
[OK]                ECDSA P256 test vectors (SHA512)                   368   369 - small r and 100 bit s^-1.
 ...                ECDSA P256 test vectors (SHA512)                   369   370 - 100-bit r and s^-1.
[OK]                ECDSA P256 test vectors (SHA512)                   369   370 - 100-bit r and s^-1.
 ...                ECDSA P256 test vectors (SHA512)                   370   371 - r and s^-1 are close to n.
[OK]                ECDSA P256 test vectors (SHA512)                   370   371 - r and s^-1 are close to n.
 ...                ECDSA P256 test vectors (SHA512)                   371   372 - s == 1.
[OK]                ECDSA P256 test vectors (SHA512)                   371   372 - s == 1.
 ...                ECDSA P256 test vectors (SHA512)                   372   373 - s == 0.
[OK]                ECDSA P256 test vectors (SHA512)                   372   373 - s == 0.
 ...                ECDSA P256 test vectors (SHA512)                   373   374 - point at infinity during verify.
[OK]                ECDSA P256 test vectors (SHA512)                   373   374 - point at infinity during verify.
 ...                ECDSA P256 test vectors (SHA512)                   374   375 - edge case for signature malleability.
[OK]                ECDSA P256 test vectors (SHA512)                   374   375 - edge case for signature malleability.
 ...                ECDSA P256 test vectors (SHA512)                   375   376 - edge case for signature malleability.
[OK]                ECDSA P256 test vectors (SHA512)                   375   376 - edge case for signature malleability.
 ...                ECDSA P256 test vectors (SHA512)                   376   377 - u1 == 1.
[OK]                ECDSA P256 test vectors (SHA512)                   376   377 - u1 == 1.
 ...                ECDSA P256 test vectors (SHA512)                   377   378 - u1 == n - 1.
[OK]                ECDSA P256 test vectors (SHA512)                   377   378 - u1 == n - 1.
 ...                ECDSA P256 test vectors (SHA512)                   378   379 - u2 == 1.
[OK]                ECDSA P256 test vectors (SHA512)                   378   379 - u2 == 1.
 ...                ECDSA P256 test vectors (SHA512)                   379   380 - u2 == n - 1.
[OK]                ECDSA P256 test vectors (SHA512)                   379   380 - u2 == n - 1.
 ...                ECDSA P256 test vectors (SHA512)                   380   381 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA512)                   380   381 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA512)                   381   382 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA512)                   381   382 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA512)                   382   383 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA512)                   382   383 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA512)                   383   384 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA512)                   383   384 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA512)                   384   385 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA512)                   384   385 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA512)                   385   386 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA512)                   385   386 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA512)                   386   387 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA512)                   386   387 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA512)                   387   388 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA512)                   387   388 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA512)                   388   389 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA512)                   388   389 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA512)                   389   390 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA512)                   389   390 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA512)                   390   391 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA512)                   390   391 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA512)                   391   392 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA512)                   391   392 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA512)                   392   393 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA512)                   392   393 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA512)                   393   394 - edge case for u1.
[OK]                ECDSA P256 test vectors (SHA512)                   393   394 - edge case for u1.
 ...                ECDSA P256 test vectors (SHA512)                   394   395 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA512)                   394   395 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA512)                   395   396 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA512)                   395   396 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA512)                   396   397 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA512)                   396   397 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA512)                   397   398 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA512)                   397   398 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA512)                   398   399 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA512)                   398   399 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA512)                   399   400 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA512)                   399   400 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA512)                   400   401 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA512)                   400   401 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA512)                   401   402 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA512)                   401   402 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA512)                   402   403 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA512)                   402   403 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA512)                   403   404 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA512)                   403   404 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA512)                   404   405 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA512)                   404   405 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA512)                   405   406 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA512)                   405   406 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA512)                   406   407 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA512)                   406   407 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA512)                   407   408 - edge case for u2.
[OK]                ECDSA P256 test vectors (SHA512)                   407   408 - edge case for u2.
 ...                ECDSA P256 test vectors (SHA512)                   408   409 - point duplication during verification.
[OK]                ECDSA P256 test vectors (SHA512)                   408   409 - point duplication during verification.
 ...                ECDSA P256 test vectors (SHA512)                   409   410 - duplication bug.
[OK]                ECDSA P256 test vectors (SHA512)                   409   410 - duplication bug.
 ...                ECDSA P256 test vectors (SHA512)                   410   411 - point with x-coordinate 0.
[OK]                ECDSA P256 test vectors (SHA512)                   410   411 - point with x-coordinate 0.
 ...                ECDSA P256 test vectors (SHA512)                   411   412 - point with x-coordinate 0.
[OK]                ECDSA P256 test vectors (SHA512)                   411   412 - point with x-coordinate 0.
 ...                ECDSA P256 test vectors (SHA512)                   412   413 - comparison with point at infinity .
[OK]                ECDSA P256 test vectors (SHA512)                   412   413 - comparison with point at infinity .
 ...                ECDSA P256 test vectors (SHA512)                   413   414 - extreme value for k and edgecase s.
[OK]                ECDSA P256 test vectors (SHA512)                   413   414 - extreme value for k and edgecase s.
 ...                ECDSA P256 test vectors (SHA512)                   414   415 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA512)                   414   415 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA512)                   415   416 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA512)                   415   416 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA512)                   416   417 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA512)                   416   417 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA512)                   417   418 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA512)                   417   418 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA512)                   418   419 - extreme value for k.
[OK]                ECDSA P256 test vectors (SHA512)                   418   419 - extreme value for k.
 ...                ECDSA P256 test vectors (SHA512)                   419   420 - extreme value for k and edgecase s.
[OK]                ECDSA P256 test vectors (SHA512)                   419   420 - extreme value for k and edgecase s.
 ...                ECDSA P256 test vectors (SHA512)                   420   421 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA512)                   420   421 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA512)                   421   422 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA512)                   421   422 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA512)                   422   423 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA512)                   422   423 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA512)                   423   424 - extreme value for k and s^-1.
[OK]                ECDSA P256 test vectors (SHA512)                   423   424 - extreme value for k and s^-1.
 ...                ECDSA P256 test vectors (SHA512)                   424   425 - extreme value for k.
[OK]                ECDSA P256 test vectors (SHA512)                   424   425 - extreme value for k.
 ...                ECDSA P256 test vectors (SHA512)                   425   426 - testing point duplication.
[OK]                ECDSA P256 test vectors (SHA512)                   425   426 - testing point duplication.
 ...                ECDSA P256 test vectors (SHA512)                   426   427 - testing point duplication.
[OK]                ECDSA P256 test vectors (SHA512)                   426   427 - testing point duplication.
 ...                ECDSA P256 test vectors (SHA512)                   427   428 - testing point duplication.
[OK]                ECDSA P256 test vectors (SHA512)                   427   428 - testing point duplication.
 ...                ECDSA P256 test vectors (SHA512)                   428   429 - testing point duplication.
[OK]                ECDSA P256 test vectors (SHA512)                   428   429 - testing point duplication.
 ...                ECDSA P256 test vectors (SHA512)                   429   430 - pseudorandom signature.
[OK]                ECDSA P256 test vectors (SHA512)                   429   430 - pseudorandom signature.
 ...                ECDSA P256 test vectors (SHA512)                   430   431 - pseudorandom signature.
[OK]                ECDSA P256 test vectors (SHA512)                   430   431 - pseudorandom signature.
 ...                ECDSA P256 test vectors (SHA512)                   431   432 - pseudorandom signature.
[OK]                ECDSA P256 test vectors (SHA512)                   431   432 - pseudorandom signature.
 ...                ECDSA P256 test vectors (SHA512)                   432   433 - pseudorandom signature.
[OK]                ECDSA P256 test vectors (SHA512)                   432   433 - pseudorandom signature.
 ...                ECDSA P256 test vectors (SHA512)                   433   434 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P256 test vectors (SHA512)                   433   434 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA P256 test vectors (SHA512)                   434   435 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P256 test vectors (SHA512)                   434   435 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA P256 test vectors (SHA512)                   435   436 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P256 test vectors (SHA512)                   435   436 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA P256 test vectors (SHA512)                   436   437 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P256 test vectors (SHA512)                   436   437 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA P256 test vectors (SHA512)                   437   438 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P256 test vectors (SHA512)                   437   438 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA P256 test vectors (SHA512)                   438   439 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P256 test vectors (SHA512)                   438   439 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA P256 test vectors (SHA512)                   439   440 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P256 test vectors (SHA512)                   439   440 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA P256 test vectors (SHA512)                   440   441 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P256 test vectors (SHA512)                   440   441 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA P256 test vectors (SHA512)                   441   442 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P256 test vectors (SHA512)                   441   442 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA P256 test vectors (SHA512)                   442   443 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P256 test vectors (SHA512)                   442   443 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA P256 test vectors (SHA512)                   443   444 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P256 test vectors (SHA512)                   443   444 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA P256 test vectors (SHA512)                   444   445 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P256 test vectors (SHA512)                   444   445 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA P256 test vectors (SHA512)                   445   446 - x-coordinate of the public key is large.
[OK]                ECDSA P256 test vectors (SHA512)                   445   446 - x-coordinate of the public key is large.
 ...                ECDSA P256 test vectors (SHA512)                   446   447 - x-coordinate of the public key is large.
[OK]                ECDSA P256 test vectors (SHA512)                   446   447 - x-coordinate of the public key is large.
 ...                ECDSA P256 test vectors (SHA512)                   447   448 - x-coordinate of the public key is large.
[OK]                ECDSA P256 test vectors (SHA512)                   447   448 - x-coordinate of the public key is large.
 ...                ECDSA P256 test vectors (SHA512)                   448   449 - x-coordinate of the public key is small.
[OK]                ECDSA P256 test vectors (SHA512)                   448   449 - x-coordinate of the public key is small.
 ...                ECDSA P256 test vectors (SHA512)                   449   450 - x-coordinate of the public key is small.
[OK]                ECDSA P256 test vectors (SHA512)                   449   450 - x-coordinate of the public key is small.
 ...                ECDSA P256 test vectors (SHA512)                   450   451 - x-coordinate of the public key is small.
[OK]                ECDSA P256 test vectors (SHA512)                   450   451 - x-coordinate of the public key is small.
 ...                ECDSA P256 test vectors (SHA512)                   451   452 - y-coordinate of the public key is small.
[OK]                ECDSA P256 test vectors (SHA512)                   451   452 - y-coordinate of the public key is small.
 ...                ECDSA P256 test vectors (SHA512)                   452   453 - y-coordinate of the public key is small.
[OK]                ECDSA P256 test vectors (SHA512)                   452   453 - y-coordinate of the public key is small.
 ...                ECDSA P256 test vectors (SHA512)                   453   454 - y-coordinate of the public key is small.
[OK]                ECDSA P256 test vectors (SHA512)                   453   454 - y-coordinate of the public key is small.
 ...                ECDSA P256 test vectors (SHA512)                   454   455 - y-coordinate of the public key is large.
[OK]                ECDSA P256 test vectors (SHA512)                   454   455 - y-coordinate of the public key is large.
 ...                ECDSA P256 test vectors (SHA512)                   455   456 - y-coordinate of the public key is large.
[OK]                ECDSA P256 test vectors (SHA512)                   455   456 - y-coordinate of the public key is large.
 ...                ECDSA P256 test vectors (SHA512)                   456   457 - y-coordinate of the public key is large.
[OK]                ECDSA P256 test vectors (SHA512)                   456   457 - y-coordinate of the public key is large.
 ...                ECDH P384 test vectors                               0   1 - normal case.
[OK]                ECDH P384 test vectors                               0   1 - normal case.
 ...                ECDH P384 test vectors                               1   2 - compressed public key.
[OK]                ECDH P384 test vectors                               1   2 - compressed public key.
 ...                ECDH P384 test vectors                               2   3 - edge case for shared secret.
[OK]                ECDH P384 test vectors                               2   3 - edge case for shared secret.
 ...                ECDH P384 test vectors                               3   4 - edge case for shared secret.
[OK]                ECDH P384 test vectors                               3   4 - edge case for shared secret.
 ...                ECDH P384 test vectors                               4   5 - edge case for shared secret.
[OK]                ECDH P384 test vectors                               4   5 - edge case for shared secret.
 ...                ECDH P384 test vectors                               5   6 - edge case for shared secret.
[OK]                ECDH P384 test vectors                               5   6 - edge case for shared secret.
 ...                ECDH P384 test vectors                               6   7 - edge case for shared secret.
[OK]                ECDH P384 test vectors                               6   7 - edge case for shared secret.
 ...                ECDH P384 test vectors                               7   8 - edge case for shared secret.
[OK]                ECDH P384 test vectors                               7   8 - edge case for shared secret.
 ...                ECDH P384 test vectors                               8   9 - edge case for shared secret.
[OK]                ECDH P384 test vectors                               8   9 - edge case for shared secret.
 ...                ECDH P384 test vectors                               9   10 - edge case for shared secret.
[OK]                ECDH P384 test vectors                               9   10 - edge case for shared secret.
 ...                ECDH P384 test vectors                              10   11 - edge case for shared secret.
[OK]                ECDH P384 test vectors                              10   11 - edge case for shared secret.
 ...                ECDH P384 test vectors                              11   12 - edge case for shared secret.
[OK]                ECDH P384 test vectors                              11   12 - edge case for shared secret.
 ...                ECDH P384 test vectors                              12   13 - edge case for shared secret.
[OK]                ECDH P384 test vectors                              12   13 - edge case for shared secret.
 ...                ECDH P384 test vectors                              13   14 - edge case for shared secret.
[OK]                ECDH P384 test vectors                              13   14 - edge case for shared secret.
 ...                ECDH P384 test vectors                              14   15 - edge case for shared secret.
[OK]                ECDH P384 test vectors                              14   15 - edge case for shared secret.
 ...                ECDH P384 test vectors                              15   16 - edge case for shared secret.
[OK]                ECDH P384 test vectors                              15   16 - edge case for shared secret.
 ...                ECDH P384 test vectors                              16   17 - edge case for shared secret.
[OK]                ECDH P384 test vectors                              16   17 - edge case for shared secret.
 ...                ECDH P384 test vectors                              17   18 - edge case for shared secret.
[OK]                ECDH P384 test vectors                              17   18 - edge case for shared secret.
 ...                ECDH P384 test vectors                              18   19 - edge case for shared secret.
[OK]                ECDH P384 test vectors                              18   19 - edge case for shared secret.
 ...                ECDH P384 test vectors                              19   20 - edge case for shared secret.
[OK]                ECDH P384 test vectors                              19   20 - edge case for shared secret.
 ...                ECDH P384 test vectors                              20   21 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDH P384 test vectors                              20   21 - y-coordinate of the public key has many trailing 0's.
 ...                ECDH P384 test vectors                              21   22 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDH P384 test vectors                              21   22 - y-coordinate of the public key has many trailing 1's.
 ...                ECDH P384 test vectors                              22   23 - y-coordinate of the public key is small.
[OK]                ECDH P384 test vectors                              22   23 - y-coordinate of the public key is small.
 ...                ECDH P384 test vectors                              23   24 - y-coordinate of the public key is large.
[OK]                ECDH P384 test vectors                              23   24 - y-coordinate of the public key is large.
 ...                ECDH P384 test vectors                              24   25 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              24   25 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              25   26 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              25   26 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              26   27 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              26   27 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              27   28 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              27   28 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              28   29 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              28   29 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              29   30 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              29   30 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              30   31 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              30   31 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              31   32 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              31   32 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              32   33 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              32   33 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              33   34 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              33   34 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              34   35 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              34   35 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              35   36 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              35   36 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              36   37 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              36   37 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              37   38 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              37   38 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              38   39 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              38   39 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              39   40 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              39   40 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              40   41 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              40   41 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              41   42 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              41   42 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              42   43 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              42   43 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              43   44 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              43   44 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              44   45 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              44   45 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              45   46 - edge cases for ephemeral key.
[OK]                ECDH P384 test vectors                              45   46 - edge cases for ephemeral key.
 ...                ECDH P384 test vectors                              46   47 - edge case for Jacobian and projective coordinates.
[OK]                ECDH P384 test vectors                              46   47 - edge case for Jacobian and projective coordinates.
 ...                ECDH P384 test vectors                              47   48 - edge case for Jacobian and projective coordinates.
[OK]                ECDH P384 test vectors                              47   48 - edge case for Jacobian and projective coordinates.
 ...                ECDH P384 test vectors                              48   49 - edge case for Jacobian and projective coordinates.
[OK]                ECDH P384 test vectors                              48   49 - edge case for Jacobian and projective coordinates.
 ...                ECDH P384 test vectors                              49   50 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              49   50 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              50   51 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              50   51 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              51   52 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              51   52 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              52   53 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              52   53 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              53   54 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              53   54 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              54   55 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              54   55 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              55   56 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              55   56 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              56   57 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              56   57 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              57   58 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              57   58 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              58   59 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              58   59 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              59   60 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              59   60 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              60   61 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              60   61 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              61   62 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              61   62 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              62   63 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              62   63 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              63   64 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              63   64 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              64   65 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              64   65 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              65   66 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              65   66 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              66   67 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              66   67 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              67   68 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              67   68 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              68   69 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              68   69 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              69   70 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P384 test vectors                              69   70 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P384 test vectors                              70   71 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                              70   71 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                              71   72 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                              71   72 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                              72   73 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                              72   73 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                              73   74 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                              73   74 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                              74   75 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                              74   75 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                              75   76 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                              75   76 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                              76   77 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P384 test vectors                              76   77 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P384 test vectors                              77   78 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P384 test vectors                              77   78 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P384 test vectors                              78   79 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P384 test vectors                              78   79 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P384 test vectors                              79   80 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P384 test vectors                              79   80 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P384 test vectors                              80   81 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P384 test vectors                              80   81 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P384 test vectors                              81   82 - point with coordinate x = 0.
[OK]                ECDH P384 test vectors                              81   82 - point with coordinate x = 0.
 ...                ECDH P384 test vectors                              82   83 - point with coordinate x = 0.
[OK]                ECDH P384 test vectors                              82   83 - point with coordinate x = 0.
 ...                ECDH P384 test vectors                              83   84 - point with coordinate x = 0.
[OK]                ECDH P384 test vectors                              83   84 - point with coordinate x = 0.
 ...                ECDH P384 test vectors                              84   85 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              84   85 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              85   86 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              85   86 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              86   87 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              86   87 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              87   88 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              87   88 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              88   89 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              88   89 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              89   90 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              89   90 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              90   91 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              90   91 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              91   92 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              91   92 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              92   93 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              92   93 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              93   94 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              93   94 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              94   95 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              94   95 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              95   96 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              95   96 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              96   97 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              96   97 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              97   98 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              97   98 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              98   99 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              98   99 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                              99   100 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                              99   100 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                             100   101 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                             100   101 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                             101   102 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                             101   102 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                             102   103 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                             102   103 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                             103   104 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                             103   104 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                             104   105 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P384 test vectors                             104   105 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P384 test vectors                             105   106 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                             105   106 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                             106   107 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                             106   107 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                             107   108 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                             107   108 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                             108   109 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                             108   109 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                             109   110 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                             109   110 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                             110   111 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                             110   111 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                             111   112 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P384 test vectors                             111   112 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P384 test vectors                             112   113 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P384 test vectors                             112   113 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P384 test vectors                             113   114 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P384 test vectors                             113   114 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P384 test vectors                             114   115 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P384 test vectors                             114   115 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P384 test vectors                             115   116 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P384 test vectors                             115   116 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P384 test vectors                             116   117 - point with coordinate y = 1.
[OK]                ECDH P384 test vectors                             116   117 - point with coordinate y = 1.
 ...                ECDH P384 test vectors                             117   118 - point with coordinate y = 1.
[OK]                ECDH P384 test vectors                             117   118 - point with coordinate y = 1.
 ...                ECDH P384 test vectors                             118   119 - point with coordinate y = 1.
[OK]                ECDH P384 test vectors                             118   119 - point with coordinate y = 1.
 ...                ECDH P384 test vectors                             119   120 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             119   120 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             120   121 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             120   121 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             121   122 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             121   122 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             122   123 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             122   123 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             123   124 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             123   124 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             124   125 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             124   125 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             125   126 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             125   126 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             126   127 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             126   127 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             127   128 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             127   128 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             128   129 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             128   129 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             129   130 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             129   130 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             130   131 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             130   131 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             131   132 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             131   132 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             132   133 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             132   133 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             133   134 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             133   134 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             134   135 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             134   135 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             135   136 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             135   136 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             136   137 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             136   137 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             137   138 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             137   138 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             138   139 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             138   139 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             139   140 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P384 test vectors                             139   140 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P384 test vectors                             140   141 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                             140   141 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                             141   142 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                             141   142 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                             142   143 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                             142   143 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                             143   144 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                             143   144 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                             144   145 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                             144   145 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                             145   146 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P384 test vectors                             145   146 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P384 test vectors                             146   147 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P384 test vectors                             146   147 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P384 test vectors                             147   148 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P384 test vectors                             147   148 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P384 test vectors                             148   149 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P384 test vectors                             148   149 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P384 test vectors                             149   150 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P384 test vectors                             149   150 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P384 test vectors                             150   151 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P384 test vectors                             150   151 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P384 test vectors                             151   152 - edge case private key.
[OK]                ECDH P384 test vectors                             151   152 - edge case private key.
 ...                ECDH P384 test vectors                             152   153 - edge case private key.
[OK]                ECDH P384 test vectors                             152   153 - edge case private key.
 ...                ECDH P384 test vectors                             153   154 - edge case private key.
[OK]                ECDH P384 test vectors                             153   154 - edge case private key.
 ...                ECDH P384 test vectors                             154   155 - edge case private key.
[OK]                ECDH P384 test vectors                             154   155 - edge case private key.
 ...                ECDH P384 test vectors                             155   156 - edge case private key.
[OK]                ECDH P384 test vectors                             155   156 - edge case private key.
 ...                ECDH P384 test vectors                             156   157 - edge case private key.
[OK]                ECDH P384 test vectors                             156   157 - edge case private key.
 ...                ECDH P384 test vectors                             157   158 - edge case private key.
[OK]                ECDH P384 test vectors                             157   158 - edge case private key.
 ...                ECDH P384 test vectors                             158   159 - edge case private key.
[OK]                ECDH P384 test vectors                             158   159 - edge case private key.
 ...                ECDH P384 test vectors                             159   160 - edge case private key.
[OK]                ECDH P384 test vectors                             159   160 - edge case private key.
 ...                ECDH P384 test vectors                             160   161 - edge case private key.
[OK]                ECDH P384 test vectors                             160   161 - edge case private key.
 ...                ECDH P384 test vectors                             161   162 - edge case private key.
[OK]                ECDH P384 test vectors                             161   162 - edge case private key.
 ...                ECDH P384 test vectors                             162   163 - edge case private key.
[OK]                ECDH P384 test vectors                             162   163 - edge case private key.
 ...                ECDH P384 test vectors                             163   164 - edge case private key.
[OK]                ECDH P384 test vectors                             163   164 - edge case private key.
 ...                ECDH P384 test vectors                             164   165 - point is not on curve.
[OK]                ECDH P384 test vectors                             164   165 - point is not on curve.
 ...                ECDH P384 test vectors                             165   166 - point is not on curve.
[OK]                ECDH P384 test vectors                             165   166 - point is not on curve.
 ...                ECDH P384 test vectors                             166   167 - point is not on curve.
[OK]                ECDH P384 test vectors                             166   167 - point is not on curve.
 ...                ECDH P384 test vectors                             167   168 - point is not on curve.
[OK]                ECDH P384 test vectors                             167   168 - point is not on curve.
 ...                ECDH P384 test vectors                             168   169 - point is not on curve.
[OK]                ECDH P384 test vectors                             168   169 - point is not on curve.
 ...                ECDH P384 test vectors                             169   170 - point is not on curve.
[OK]                ECDH P384 test vectors                             169   170 - point is not on curve.
 ...                ECDH P384 test vectors                             170   171 - point is not on curve.
[OK]                ECDH P384 test vectors                             170   171 - point is not on curve.
 ...                ECDH P384 test vectors                             171   172 - point is not on curve.
[OK]                ECDH P384 test vectors                             171   172 - point is not on curve.
 ...                ECDH P384 test vectors                             172   173 - point is not on curve.
[OK]                ECDH P384 test vectors                             172   173 - point is not on curve.
 ...                ECDH P384 test vectors                             173   174 - point is not on curve.
[OK]                ECDH P384 test vectors                             173   174 - point is not on curve.
 ...                ECDH P384 test vectors                             174   175 - point is not on curve.
[OK]                ECDH P384 test vectors                             174   175 - point is not on curve.
 ...                ECDH P384 test vectors                             175   176 - point is not on curve.
[OK]                ECDH P384 test vectors                             175   176 - point is not on curve.
 ...                ECDH P384 test vectors                             176   177 - point is not on curve.
[OK]                ECDH P384 test vectors                             176   177 - point is not on curve.
 ...                ECDH P384 test vectors                             177   178 - point is not on curve.
[OK]                ECDH P384 test vectors                             177   178 - point is not on curve.
 ...                ECDH P384 test vectors                             178   179 - point is not on curve.
[OK]                ECDH P384 test vectors                             178   179 - point is not on curve.
 ...                ECDH P384 test vectors                             179   180 - point is not on curve.
[OK]                ECDH P384 test vectors                             179   180 - point is not on curve.
 ...                ECDH P384 test vectors                             180   181 - .
[OK]                ECDH P384 test vectors                             180   181 - .
 ...                ECDH P384 test vectors                             181   182 - public point not on curve.
[OK]                ECDH P384 test vectors                             181   182 - public point not on curve.
 ...                ECDH P384 test vectors                             182   183 - public point = (0,0).
[OK]                ECDH P384 test vectors                             182   183 - public point = (0,0).
 ...                ECDH P384 test vectors                             183   196 - using secp224r1.
[OK]                ECDH P384 test vectors                             183   196 - using secp224r1.
 ...                ECDH P384 test vectors                             184   197 - using secp256r1.
[OK]                ECDH P384 test vectors                             184   197 - using secp256r1.
 ...                ECDH P384 test vectors                             185   198 - using secp256k1.
[OK]                ECDH P384 test vectors                             185   198 - using secp256k1.
 ...                ECDH P384 test vectors                             186   201 - Public key uses wrong curve: secp224r1.
[OK]                ECDH P384 test vectors                             186   201 - Public key uses wrong curve: secp224r1.
 ...                ECDH P384 test vectors                             187   202 - Public key uses wrong curve: secp256r1.
[OK]                ECDH P384 test vectors                             187   202 - Public key uses wrong curve: secp256r1.
 ...                ECDH P384 test vectors                             188   203 - Public key uses wrong curve: secp521r1.
[OK]                ECDH P384 test vectors                             188   203 - Public key uses wrong curve: secp521r1.
 ...                ECDH P384 test vectors                             189   204 - Public key uses wrong curve: secp256k1.
[OK]                ECDH P384 test vectors                             189   204 - Public key uses wrong curve: secp256k1.
 ...                ECDH P384 test vectors                             190   205 - Public key uses wrong curve: secp224k1.
[OK]                ECDH P384 test vectors                             190   205 - Public key uses wrong curve: secp224k1.
 ...                ECDH P384 test vectors                             191   206 - Public key uses wrong curve: brainpoolP224r1.
[OK]                ECDH P384 test vectors                             191   206 - Public key uses wrong curve: brainpoolP224r1.
 ...                ECDH P384 test vectors                             192   207 - Public key uses wrong curve: brainpoolP256r1.
[OK]                ECDH P384 test vectors                             192   207 - Public key uses wrong curve: brainpoolP256r1.
 ...                ECDH P384 test vectors                             193   208 - Public key uses wrong curve: brainpoolP320r1.
[OK]                ECDH P384 test vectors                             193   208 - Public key uses wrong curve: brainpoolP320r1.
 ...                ECDH P384 test vectors                             194   209 - Public key uses wrong curve: brainpoolP384r1.
[OK]                ECDH P384 test vectors                             194   209 - Public key uses wrong curve: brainpoolP384r1.
 ...                ECDH P384 test vectors                             195   210 - Public key uses wrong curve: brainpoolP512r1.
[OK]                ECDH P384 test vectors                             195   210 - Public key uses wrong curve: brainpoolP512r1.
 ...                ECDH P384 test vectors                             196   211 - Public key uses wrong curve: brainpoolP224t1.
[OK]                ECDH P384 test vectors                             196   211 - Public key uses wrong curve: brainpoolP224t1.
 ...                ECDH P384 test vectors                             197   212 - Public key uses wrong curve: brainpoolP256t1.
[OK]                ECDH P384 test vectors                             197   212 - Public key uses wrong curve: brainpoolP256t1.
 ...                ECDH P384 test vectors                             198   213 - Public key uses wrong curve: brainpoolP320t1.
[OK]                ECDH P384 test vectors                             198   213 - Public key uses wrong curve: brainpoolP320t1.
 ...                ECDH P384 test vectors                             199   214 - Public key uses wrong curve: brainpoolP384t1.
[OK]                ECDH P384 test vectors                             199   214 - Public key uses wrong curve: brainpoolP384t1.
 ...                ECDH P384 test vectors                             200   215 - Public key uses wrong curve: brainpoolP512t1.
[OK]                ECDH P384 test vectors                             200   215 - Public key uses wrong curve: brainpoolP512t1.
 ...                ECDH P384 test vectors                             201   216 - invalid public key.
[OK]                ECDH P384 test vectors                             201   216 - invalid public key.
 ...                ECDSA P384 test vectors (SHA384)                     0   1 - signature malleability.
[OK]                ECDSA P384 test vectors (SHA384)                     0   1 - signature malleability.
 ...                ECDSA P384 test vectors (SHA384)                     1   2 - Legacy:ASN encoding of s misses leading 0.
[OK]                ECDSA P384 test vectors (SHA384)                     1   2 - Legacy:ASN encoding of s misses leading 0.
 ...                ECDSA P384 test vectors (SHA384)                     2   3 - valid.
[OK]                ECDSA P384 test vectors (SHA384)                     2   3 - valid.
 ...                ECDSA P384 test vectors (SHA384)                     3   4 - long form encoding of length of sequence.
[OK]                ECDSA P384 test vectors (SHA384)                     3   4 - long form encoding of length of sequence.
 ...                ECDSA P384 test vectors (SHA384)                     4   5 - length of sequence contains leading 0.
[OK]                ECDSA P384 test vectors (SHA384)                     4   5 - length of sequence contains leading 0.
 ...                ECDSA P384 test vectors (SHA384)                     5   6 - wrong length of sequence.
[OK]                ECDSA P384 test vectors (SHA384)                     5   6 - wrong length of sequence.
 ...                ECDSA P384 test vectors (SHA384)                     6   7 - wrong length of sequence.
[OK]                ECDSA P384 test vectors (SHA384)                     6   7 - wrong length of sequence.
 ...                ECDSA P384 test vectors (SHA384)                     7   8 - uint32 overflow in length of sequence.
[OK]                ECDSA P384 test vectors (SHA384)                     7   8 - uint32 overflow in length of sequence.
 ...                ECDSA P384 test vectors (SHA384)                     8   9 - uint64 overflow in length of sequence.
[OK]                ECDSA P384 test vectors (SHA384)                     8   9 - uint64 overflow in length of sequence.
 ...                ECDSA P384 test vectors (SHA384)                     9   10 - length of sequence = 2**31 - 1.
[OK]                ECDSA P384 test vectors (SHA384)                     9   10 - length of sequence = 2**31 - 1.
 ...                ECDSA P384 test vectors (SHA384)                    10   11 - length of sequence = 2**32 - 1.
[OK]                ECDSA P384 test vectors (SHA384)                    10   11 - length of sequence = 2**32 - 1.
 ...                ECDSA P384 test vectors (SHA384)                    11   12 - length of sequence = 2**40 - 1.
[OK]                ECDSA P384 test vectors (SHA384)                    11   12 - length of sequence = 2**40 - 1.
 ...                ECDSA P384 test vectors (SHA384)                    12   13 - length of sequence = 2**64 - 1.
[OK]                ECDSA P384 test vectors (SHA384)                    12   13 - length of sequence = 2**64 - 1.
 ...                ECDSA P384 test vectors (SHA384)                    13   14 - incorrect length of sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    13   14 - incorrect length of sequence.
 ...                ECDSA P384 test vectors (SHA384)                    14   15 - indefinite length without termination.
[OK]                ECDSA P384 test vectors (SHA384)                    14   15 - indefinite length without termination.
 ...                ECDSA P384 test vectors (SHA384)                    15   16 - indefinite length without termination.
[OK]                ECDSA P384 test vectors (SHA384)                    15   16 - indefinite length without termination.
 ...                ECDSA P384 test vectors (SHA384)                    16   17 - indefinite length without termination.
[OK]                ECDSA P384 test vectors (SHA384)                    16   17 - indefinite length without termination.
 ...                ECDSA P384 test vectors (SHA384)                    17   18 - removing sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    17   18 - removing sequence.
 ...                ECDSA P384 test vectors (SHA384)                    18   19 - lonely sequence tag.
[OK]                ECDSA P384 test vectors (SHA384)                    18   19 - lonely sequence tag.
 ...                ECDSA P384 test vectors (SHA384)                    19   20 - appending 0's to sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    19   20 - appending 0's to sequence.
 ...                ECDSA P384 test vectors (SHA384)                    20   21 - prepending 0's to sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    20   21 - prepending 0's to sequence.
 ...                ECDSA P384 test vectors (SHA384)                    21   22 - appending unused 0's to sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    21   22 - appending unused 0's to sequence.
 ...                ECDSA P384 test vectors (SHA384)                    22   23 - appending null value to sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    22   23 - appending null value to sequence.
 ...                ECDSA P384 test vectors (SHA384)                    23   24 - including garbage.
[OK]                ECDSA P384 test vectors (SHA384)                    23   24 - including garbage.
 ...                ECDSA P384 test vectors (SHA384)                    24   25 - including garbage.
[OK]                ECDSA P384 test vectors (SHA384)                    24   25 - including garbage.
 ...                ECDSA P384 test vectors (SHA384)                    25   26 - including garbage.
[OK]                ECDSA P384 test vectors (SHA384)                    25   26 - including garbage.
 ...                ECDSA P384 test vectors (SHA384)                    26   27 - including garbage.
[OK]                ECDSA P384 test vectors (SHA384)                    26   27 - including garbage.
 ...                ECDSA P384 test vectors (SHA384)                    27   28 - including garbage.
[OK]                ECDSA P384 test vectors (SHA384)                    27   28 - including garbage.
 ...                ECDSA P384 test vectors (SHA384)                    28   29 - including garbage.
[OK]                ECDSA P384 test vectors (SHA384)                    28   29 - including garbage.
 ...                ECDSA P384 test vectors (SHA384)                    29   30 - including garbage.
[OK]                ECDSA P384 test vectors (SHA384)                    29   30 - including garbage.
 ...                ECDSA P384 test vectors (SHA384)                    30   31 - including garbage.
[OK]                ECDSA P384 test vectors (SHA384)                    30   31 - including garbage.
 ...                ECDSA P384 test vectors (SHA384)                    31   32 - including garbage.
[OK]                ECDSA P384 test vectors (SHA384)                    31   32 - including garbage.
 ...                ECDSA P384 test vectors (SHA384)                    32   33 - including undefined tags.
[OK]                ECDSA P384 test vectors (SHA384)                    32   33 - including undefined tags.
 ...                ECDSA P384 test vectors (SHA384)                    33   34 - including undefined tags.
[OK]                ECDSA P384 test vectors (SHA384)                    33   34 - including undefined tags.
 ...                ECDSA P384 test vectors (SHA384)                    34   35 - including undefined tags.
[OK]                ECDSA P384 test vectors (SHA384)                    34   35 - including undefined tags.
 ...                ECDSA P384 test vectors (SHA384)                    35   36 - including undefined tags.
[OK]                ECDSA P384 test vectors (SHA384)                    35   36 - including undefined tags.
 ...                ECDSA P384 test vectors (SHA384)                    36   37 - including undefined tags.
[OK]                ECDSA P384 test vectors (SHA384)                    36   37 - including undefined tags.
 ...                ECDSA P384 test vectors (SHA384)                    37   38 - including undefined tags.
[OK]                ECDSA P384 test vectors (SHA384)                    37   38 - including undefined tags.
 ...                ECDSA P384 test vectors (SHA384)                    38   39 - truncated length of sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    38   39 - truncated length of sequence.
 ...                ECDSA P384 test vectors (SHA384)                    39   40 - using composition with indefinite length.
[OK]                ECDSA P384 test vectors (SHA384)                    39   40 - using composition with indefinite length.
 ...                ECDSA P384 test vectors (SHA384)                    40   41 - using composition with indefinite length.
[OK]                ECDSA P384 test vectors (SHA384)                    40   41 - using composition with indefinite length.
 ...                ECDSA P384 test vectors (SHA384)                    41   42 - using composition with indefinite length.
[OK]                ECDSA P384 test vectors (SHA384)                    41   42 - using composition with indefinite length.
 ...                ECDSA P384 test vectors (SHA384)                    42   43 - using composition with wrong tag.
[OK]                ECDSA P384 test vectors (SHA384)                    42   43 - using composition with wrong tag.
 ...                ECDSA P384 test vectors (SHA384)                    43   44 - using composition with wrong tag.
[OK]                ECDSA P384 test vectors (SHA384)                    43   44 - using composition with wrong tag.
 ...                ECDSA P384 test vectors (SHA384)                    44   45 - using composition with wrong tag.
[OK]                ECDSA P384 test vectors (SHA384)                    44   45 - using composition with wrong tag.
 ...                ECDSA P384 test vectors (SHA384)                    45   46 - Replacing sequence with NULL.
[OK]                ECDSA P384 test vectors (SHA384)                    45   46 - Replacing sequence with NULL.
 ...                ECDSA P384 test vectors (SHA384)                    46   47 - changing tag value of sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    46   47 - changing tag value of sequence.
 ...                ECDSA P384 test vectors (SHA384)                    47   48 - changing tag value of sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    47   48 - changing tag value of sequence.
 ...                ECDSA P384 test vectors (SHA384)                    48   49 - changing tag value of sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    48   49 - changing tag value of sequence.
 ...                ECDSA P384 test vectors (SHA384)                    49   50 - changing tag value of sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    49   50 - changing tag value of sequence.
 ...                ECDSA P384 test vectors (SHA384)                    50   51 - changing tag value of sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    50   51 - changing tag value of sequence.
 ...                ECDSA P384 test vectors (SHA384)                    51   52 - dropping value of sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    51   52 - dropping value of sequence.
 ...                ECDSA P384 test vectors (SHA384)                    52   53 - using composition for sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    52   53 - using composition for sequence.
 ...                ECDSA P384 test vectors (SHA384)                    53   54 - truncated sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    53   54 - truncated sequence.
 ...                ECDSA P384 test vectors (SHA384)                    54   55 - truncated sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    54   55 - truncated sequence.
 ...                ECDSA P384 test vectors (SHA384)                    55   56 - indefinite length.
[OK]                ECDSA P384 test vectors (SHA384)                    55   56 - indefinite length.
 ...                ECDSA P384 test vectors (SHA384)                    56   57 - indefinite length with truncated delimiter.
[OK]                ECDSA P384 test vectors (SHA384)                    56   57 - indefinite length with truncated delimiter.
 ...                ECDSA P384 test vectors (SHA384)                    57   58 - indefinite length with additional element.
[OK]                ECDSA P384 test vectors (SHA384)                    57   58 - indefinite length with additional element.
 ...                ECDSA P384 test vectors (SHA384)                    58   59 - indefinite length with truncated element.
[OK]                ECDSA P384 test vectors (SHA384)                    58   59 - indefinite length with truncated element.
 ...                ECDSA P384 test vectors (SHA384)                    59   60 - indefinite length with garbage.
[OK]                ECDSA P384 test vectors (SHA384)                    59   60 - indefinite length with garbage.
 ...                ECDSA P384 test vectors (SHA384)                    60   61 - indefinite length with nonempty EOC.
[OK]                ECDSA P384 test vectors (SHA384)                    60   61 - indefinite length with nonempty EOC.
 ...                ECDSA P384 test vectors (SHA384)                    61   62 - prepend empty sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    61   62 - prepend empty sequence.
 ...                ECDSA P384 test vectors (SHA384)                    62   63 - append empty sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    62   63 - append empty sequence.
 ...                ECDSA P384 test vectors (SHA384)                    63   64 - append garbage with high tag number.
[OK]                ECDSA P384 test vectors (SHA384)                    63   64 - append garbage with high tag number.
 ...                ECDSA P384 test vectors (SHA384)                    64   65 - sequence of sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    64   65 - sequence of sequence.
 ...                ECDSA P384 test vectors (SHA384)                    65   66 - truncated sequence: removed last 1 elements.
[OK]                ECDSA P384 test vectors (SHA384)                    65   66 - truncated sequence: removed last 1 elements.
 ...                ECDSA P384 test vectors (SHA384)                    66   67 - repeating element in sequence.
[OK]                ECDSA P384 test vectors (SHA384)                    66   67 - repeating element in sequence.
 ...                ECDSA P384 test vectors (SHA384)                    67   68 - long form encoding of length of integer.
[OK]                ECDSA P384 test vectors (SHA384)                    67   68 - long form encoding of length of integer.
 ...                ECDSA P384 test vectors (SHA384)                    68   69 - long form encoding of length of integer.
[OK]                ECDSA P384 test vectors (SHA384)                    68   69 - long form encoding of length of integer.
 ...                ECDSA P384 test vectors (SHA384)                    69   70 - length of integer contains leading 0.
[OK]                ECDSA P384 test vectors (SHA384)                    69   70 - length of integer contains leading 0.
 ...                ECDSA P384 test vectors (SHA384)                    70   71 - length of integer contains leading 0.
[OK]                ECDSA P384 test vectors (SHA384)                    70   71 - length of integer contains leading 0.
 ...                ECDSA P384 test vectors (SHA384)                    71   72 - wrong length of integer.
[OK]                ECDSA P384 test vectors (SHA384)                    71   72 - wrong length of integer.
 ...                ECDSA P384 test vectors (SHA384)                    72   73 - wrong length of integer.
[OK]                ECDSA P384 test vectors (SHA384)                    72   73 - wrong length of integer.
 ...                ECDSA P384 test vectors (SHA384)                    73   74 - wrong length of integer.
[OK]                ECDSA P384 test vectors (SHA384)                    73   74 - wrong length of integer.
 ...                ECDSA P384 test vectors (SHA384)                    74   75 - wrong length of integer.
[OK]                ECDSA P384 test vectors (SHA384)                    74   75 - wrong length of integer.
 ...                ECDSA P384 test vectors (SHA384)                    75   76 - uint32 overflow in length of integer.
[OK]                ECDSA P384 test vectors (SHA384)                    75   76 - uint32 overflow in length of integer.
 ...                ECDSA P384 test vectors (SHA384)                    76   77 - uint32 overflow in length of integer.
[OK]                ECDSA P384 test vectors (SHA384)                    76   77 - uint32 overflow in length of integer.
 ...                ECDSA P384 test vectors (SHA384)                    77   78 - uint64 overflow in length of integer.
[OK]                ECDSA P384 test vectors (SHA384)                    77   78 - uint64 overflow in length of integer.
 ...                ECDSA P384 test vectors (SHA384)                    78   79 - uint64 overflow in length of integer.
[OK]                ECDSA P384 test vectors (SHA384)                    78   79 - uint64 overflow in length of integer.
 ...                ECDSA P384 test vectors (SHA384)                    79   80 - length of integer = 2**31 - 1.
[OK]                ECDSA P384 test vectors (SHA384)                    79   80 - length of integer = 2**31 - 1.
 ...                ECDSA P384 test vectors (SHA384)                    80   81 - length of integer = 2**31 - 1.
[OK]                ECDSA P384 test vectors (SHA384)                    80   81 - length of integer = 2**31 - 1.
 ...                ECDSA P384 test vectors (SHA384)                    81   82 - length of integer = 2**32 - 1.
[OK]                ECDSA P384 test vectors (SHA384)                    81   82 - length of integer = 2**32 - 1.
 ...                ECDSA P384 test vectors (SHA384)                    82   83 - length of integer = 2**32 - 1.
[OK]                ECDSA P384 test vectors (SHA384)                    82   83 - length of integer = 2**32 - 1.
 ...                ECDSA P384 test vectors (SHA384)                    83   84 - length of integer = 2**40 - 1.
[OK]                ECDSA P384 test vectors (SHA384)                    83   84 - length of integer = 2**40 - 1.
 ...                ECDSA P384 test vectors (SHA384)                    84   85 - length of integer = 2**40 - 1.
[OK]                ECDSA P384 test vectors (SHA384)                    84   85 - length of integer = 2**40 - 1.
 ...                ECDSA P384 test vectors (SHA384)                    85   86 - length of integer = 2**64 - 1.
[OK]                ECDSA P384 test vectors (SHA384)                    85   86 - length of integer = 2**64 - 1.
 ...                ECDSA P384 test vectors (SHA384)                    86   87 - length of integer = 2**64 - 1.
[OK]                ECDSA P384 test vectors (SHA384)                    86   87 - length of integer = 2**64 - 1.
 ...                ECDSA P384 test vectors (SHA384)                    87   88 - incorrect length of integer.
[OK]                ECDSA P384 test vectors (SHA384)                    87   88 - incorrect length of integer.
 ...                ECDSA P384 test vectors (SHA384)                    88   89 - incorrect length of integer.
[OK]                ECDSA P384 test vectors (SHA384)                    88   89 - incorrect length of integer.
 ...                ECDSA P384 test vectors (SHA384)                    89   90 - removing integer.
[OK]                ECDSA P384 test vectors (SHA384)                    89   90 - removing integer.
 ...                ECDSA P384 test vectors (SHA384)                    90   91 - lonely integer tag.
[OK]                ECDSA P384 test vectors (SHA384)                    90   91 - lonely integer tag.
 ...                ECDSA P384 test vectors (SHA384)                    91   92 - lonely integer tag.
[OK]                ECDSA P384 test vectors (SHA384)                    91   92 - lonely integer tag.
 ...                ECDSA P384 test vectors (SHA384)                    92   93 - appending 0's to integer.
[OK]                ECDSA P384 test vectors (SHA384)                    92   93 - appending 0's to integer.
 ...                ECDSA P384 test vectors (SHA384)                    93   94 - appending 0's to integer.
[OK]                ECDSA P384 test vectors (SHA384)                    93   94 - appending 0's to integer.
 ...                ECDSA P384 test vectors (SHA384)                    94   95 - prepending 0's to integer.
[OK]                ECDSA P384 test vectors (SHA384)                    94   95 - prepending 0's to integer.
 ...                ECDSA P384 test vectors (SHA384)                    95   96 - prepending 0's to integer.
[OK]                ECDSA P384 test vectors (SHA384)                    95   96 - prepending 0's to integer.
 ...                ECDSA P384 test vectors (SHA384)                    96   97 - appending unused 0's to integer.
[OK]                ECDSA P384 test vectors (SHA384)                    96   97 - appending unused 0's to integer.
 ...                ECDSA P384 test vectors (SHA384)                    97   98 - appending null value to integer.
[OK]                ECDSA P384 test vectors (SHA384)                    97   98 - appending null value to integer.
 ...                ECDSA P384 test vectors (SHA384)                    98   99 - appending null value to integer.
[OK]                ECDSA P384 test vectors (SHA384)                    98   99 - appending null value to integer.
 ...                ECDSA P384 test vectors (SHA384)                    99   100 - truncated length of integer.
[OK]                ECDSA P384 test vectors (SHA384)                    99   100 - truncated length of integer.
 ...                ECDSA P384 test vectors (SHA384)                   100   101 - truncated length of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   100   101 - truncated length of integer.
 ...                ECDSA P384 test vectors (SHA384)                   101   102 - Replacing integer with NULL.
[OK]                ECDSA P384 test vectors (SHA384)                   101   102 - Replacing integer with NULL.
 ...                ECDSA P384 test vectors (SHA384)                   102   103 - Replacing integer with NULL.
[OK]                ECDSA P384 test vectors (SHA384)                   102   103 - Replacing integer with NULL.
 ...                ECDSA P384 test vectors (SHA384)                   103   104 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   103   104 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA384)                   104   105 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   104   105 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA384)                   105   106 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   105   106 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA384)                   106   107 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   106   107 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA384)                   107   108 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   107   108 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA384)                   108   109 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   108   109 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA384)                   109   110 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   109   110 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA384)                   110   111 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   110   111 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA384)                   111   112 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   111   112 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA384)                   112   113 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   112   113 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA384)                   113   114 - dropping value of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   113   114 - dropping value of integer.
 ...                ECDSA P384 test vectors (SHA384)                   114   115 - dropping value of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   114   115 - dropping value of integer.
 ...                ECDSA P384 test vectors (SHA384)                   115   116 - using composition for integer.
[OK]                ECDSA P384 test vectors (SHA384)                   115   116 - using composition for integer.
 ...                ECDSA P384 test vectors (SHA384)                   116   117 - using composition for integer.
[OK]                ECDSA P384 test vectors (SHA384)                   116   117 - using composition for integer.
 ...                ECDSA P384 test vectors (SHA384)                   117   118 - modify first byte of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   117   118 - modify first byte of integer.
 ...                ECDSA P384 test vectors (SHA384)                   118   119 - modify first byte of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   118   119 - modify first byte of integer.
 ...                ECDSA P384 test vectors (SHA384)                   119   120 - modify last byte of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   119   120 - modify last byte of integer.
 ...                ECDSA P384 test vectors (SHA384)                   120   121 - modify last byte of integer.
[OK]                ECDSA P384 test vectors (SHA384)                   120   121 - modify last byte of integer.
 ...                ECDSA P384 test vectors (SHA384)                   121   122 - truncated integer.
[OK]                ECDSA P384 test vectors (SHA384)                   121   122 - truncated integer.
 ...                ECDSA P384 test vectors (SHA384)                   122   123 - truncated integer.
[OK]                ECDSA P384 test vectors (SHA384)                   122   123 - truncated integer.
 ...                ECDSA P384 test vectors (SHA384)                   123   124 - truncated integer.
[OK]                ECDSA P384 test vectors (SHA384)                   123   124 - truncated integer.
 ...                ECDSA P384 test vectors (SHA384)                   124   125 - leading ff in integer.
[OK]                ECDSA P384 test vectors (SHA384)                   124   125 - leading ff in integer.
 ...                ECDSA P384 test vectors (SHA384)                   125   126 - leading ff in integer.
[OK]                ECDSA P384 test vectors (SHA384)                   125   126 - leading ff in integer.
 ...                ECDSA P384 test vectors (SHA384)                   126   127 - replaced integer by infinity.
[OK]                ECDSA P384 test vectors (SHA384)                   126   127 - replaced integer by infinity.
 ...                ECDSA P384 test vectors (SHA384)                   127   128 - replaced integer by infinity.
[OK]                ECDSA P384 test vectors (SHA384)                   127   128 - replaced integer by infinity.
 ...                ECDSA P384 test vectors (SHA384)                   128   129 - replacing integer with zero.
[OK]                ECDSA P384 test vectors (SHA384)                   128   129 - replacing integer with zero.
 ...                ECDSA P384 test vectors (SHA384)                   129   130 - replacing integer with zero.
[OK]                ECDSA P384 test vectors (SHA384)                   129   130 - replacing integer with zero.
 ...                ECDSA P384 test vectors (SHA384)                   130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA384)                   130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA384)                   131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA384)                   131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA384)                   132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA384)                   132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA384)                   133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA384)                   133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA384)                   134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA384)                   134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA384)                   135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA384)                   135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA384)                   136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA384)                   136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA384)                   137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA384)                   137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA384)                   138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA384)                   138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA384)                   139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA384)                   139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA384)                   140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA384)                   140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA384)                   141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA384)                   141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA384)                   142   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA384)                   142   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA384)                   143   144 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   143   144 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   144   145 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   144   145 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   145   146 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   145   146 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   146   147 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   146   147 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   147   148 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   147   148 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   148   149 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   148   149 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   149   150 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   149   150 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   150   151 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   150   151 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   151   152 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   151   152 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   152   153 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   152   153 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   153   154 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   153   154 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   154   155 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   154   155 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   155   156 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   155   156 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   156   157 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   156   157 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   157   158 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   157   158 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   158   159 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   158   159 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   159   160 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   159   160 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   160   161 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   160   161 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   161   162 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   161   162 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   162   163 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   162   163 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   163   164 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   163   164 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   164   165 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   164   165 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   165   166 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   165   166 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   166   167 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   166   167 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   167   168 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   167   168 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   168   169 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   168   169 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   169   170 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   169   170 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   170   171 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   170   171 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   171   172 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   171   172 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   172   173 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   172   173 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   173   174 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   173   174 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   174   175 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   174   175 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   175   176 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   175   176 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   176   177 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   176   177 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   177   178 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   177   178 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   178   179 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   178   179 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   179   180 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   179   180 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   180   181 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   180   181 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   181   182 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   181   182 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   182   183 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   182   183 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   183   184 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   183   184 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   184   185 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   184   185 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   185   186 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   185   186 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   186   187 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   186   187 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   187   188 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   187   188 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   188   189 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   188   189 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   189   190 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   189   190 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   190   191 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   190   191 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   191   192 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   191   192 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   192   193 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   192   193 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   193   194 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   193   194 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   194   195 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   194   195 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   195   196 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   195   196 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   196   197 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   196   197 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   197   198 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   197   198 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   198   199 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   198   199 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   199   200 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   199   200 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   200   201 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   200   201 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   201   202 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   201   202 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   202   203 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   202   203 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   203   204 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   203   204 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   204   205 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   204   205 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   205   206 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   205   206 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   206   207 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   206   207 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   207   208 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   207   208 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   208   209 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   208   209 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   209   210 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   209   210 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   210   211 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   210   211 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   211   212 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   211   212 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   212   213 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   212   213 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   213   214 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   213   214 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   214   215 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   214   215 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   215   216 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   215   216 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   216   217 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   216   217 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   217   218 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   217   218 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   218   219 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   218   219 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   219   220 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   219   220 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   220   221 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   220   221 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   221   222 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   221   222 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   222   223 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   222   223 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA384)                   223   224 - Signature encoding contains wrong types.
[OK]                ECDSA P384 test vectors (SHA384)                   223   224 - Signature encoding contains wrong types.
 ...                ECDSA P384 test vectors (SHA384)                   224   225 - Signature encoding contains wrong types.
[OK]                ECDSA P384 test vectors (SHA384)                   224   225 - Signature encoding contains wrong types.
 ...                ECDSA P384 test vectors (SHA384)                   225   226 - Signature encoding contains wrong types.
[OK]                ECDSA P384 test vectors (SHA384)                   225   226 - Signature encoding contains wrong types.
 ...                ECDSA P384 test vectors (SHA384)                   226   227 - Signature encoding contains wrong types.
[OK]                ECDSA P384 test vectors (SHA384)                   226   227 - Signature encoding contains wrong types.
 ...                ECDSA P384 test vectors (SHA384)                   227   228 - Signature encoding contains wrong types.
[OK]                ECDSA P384 test vectors (SHA384)                   227   228 - Signature encoding contains wrong types.
 ...                ECDSA P384 test vectors (SHA384)                   228   229 - Signature encoding contains wrong types.
[OK]                ECDSA P384 test vectors (SHA384)                   228   229 - Signature encoding contains wrong types.
 ...                ECDSA P384 test vectors (SHA384)                   229   230 - Edge case for Shamir multiplication.
[OK]                ECDSA P384 test vectors (SHA384)                   229   230 - Edge case for Shamir multiplication.
 ...                ECDSA P384 test vectors (SHA384)                   230   231 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   230   231 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   231   232 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   231   232 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   232   233 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   232   233 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   233   234 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   233   234 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   234   235 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   234   235 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   235   236 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   235   236 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   236   237 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   236   237 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   237   238 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   237   238 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   238   239 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   238   239 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   239   240 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   239   240 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   240   241 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   240   241 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   241   242 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   241   242 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   242   243 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   242   243 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   243   244 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   243   244 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   244   245 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   244   245 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   245   246 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   245   246 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   246   247 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   246   247 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   247   248 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   247   248 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   248   249 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   248   249 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   249   250 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   249   250 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   250   251 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   250   251 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   251   252 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   251   252 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   252   253 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   252   253 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   253   254 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   253   254 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   254   255 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   254   255 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   255   256 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   255   256 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   256   257 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   256   257 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   257   258 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   257   258 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   258   259 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   258   259 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   259   260 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   259   260 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   260   261 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   260   261 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   261   262 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   261   262 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   262   263 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   262   263 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   263   264 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   263   264 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   264   265 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   264   265 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   265   266 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   265   266 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   266   267 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   266   267 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   267   268 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   267   268 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   268   269 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   268   269 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   269   270 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   269   270 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   270   271 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   270   271 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   271   272 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   271   272 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   272   273 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   272   273 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   273   274 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   273   274 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   274   275 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   274   275 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   275   276 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   275   276 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   276   277 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   276   277 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   277   278 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   277   278 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   278   279 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   278   279 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   279   280 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   279   280 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   280   281 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   280   281 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   281   282 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   281   282 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   282   283 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   282   283 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   283   284 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   283   284 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   284   285 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   284   285 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   285   286 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   285   286 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   286   287 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   286   287 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   287   288 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   287   288 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   288   289 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   288   289 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   289   290 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   289   290 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   290   291 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   290   291 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   291   292 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   291   292 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   292   293 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   292   293 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   293   294 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   293   294 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   294   295 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   294   295 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   295   296 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   295   296 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   296   297 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   296   297 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   297   298 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   297   298 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   298   299 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   298   299 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   299   300 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   299   300 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   300   301 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   300   301 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   301   302 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   301   302 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   302   303 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   302   303 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   303   304 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   303   304 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   304   305 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   304   305 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   305   306 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   305   306 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   306   307 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   306   307 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   307   308 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   307   308 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   308   309 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   308   309 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   309   310 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   309   310 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   310   311 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   310   311 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   311   312 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   311   312 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   312   313 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   312   313 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   313   314 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   313   314 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   314   315 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   314   315 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   315   316 - special case hash.
[OK]                ECDSA P384 test vectors (SHA384)                   315   316 - special case hash.
 ...                ECDSA P384 test vectors (SHA384)                   316   317 - k*G has a large x-coordinate.
[OK]                ECDSA P384 test vectors (SHA384)                   316   317 - k*G has a large x-coordinate.
 ...                ECDSA P384 test vectors (SHA384)                   317   318 - r too large.
[OK]                ECDSA P384 test vectors (SHA384)                   317   318 - r too large.
 ...                ECDSA P384 test vectors (SHA384)                   318   319 - r,s are large.
[OK]                ECDSA P384 test vectors (SHA384)                   318   319 - r,s are large.
 ...                ECDSA P384 test vectors (SHA384)                   319   320 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA P384 test vectors (SHA384)                   319   320 - r and s^-1 have a large Hamming weight.
 ...                ECDSA P384 test vectors (SHA384)                   320   321 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA P384 test vectors (SHA384)                   320   321 - r and s^-1 have a large Hamming weight.
 ...                ECDSA P384 test vectors (SHA384)                   321   322 - small r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   321   322 - small r and s.
 ...                ECDSA P384 test vectors (SHA384)                   322   323 - small r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   322   323 - small r and s.
 ...                ECDSA P384 test vectors (SHA384)                   323   324 - small r and s.
[OK]                ECDSA P384 test vectors (SHA384)                   323   324 - small r and s.
 ...                ECDSA P384 test vectors (SHA384)                   324   325 - r is larger than n.
[OK]                ECDSA P384 test vectors (SHA384)                   324   325 - r is larger than n.
 ...                ECDSA P384 test vectors (SHA384)                   325   326 - s is larger than n.
[OK]                ECDSA P384 test vectors (SHA384)                   325   326 - s is larger than n.
 ...                ECDSA P384 test vectors (SHA384)                   326   327 - small r and s^-1.
[OK]                ECDSA P384 test vectors (SHA384)                   326   327 - small r and s^-1.
 ...                ECDSA P384 test vectors (SHA384)                   327   328 - smallish r and s^-1.
[OK]                ECDSA P384 test vectors (SHA384)                   327   328 - smallish r and s^-1.
 ...                ECDSA P384 test vectors (SHA384)                   328   329 - 100-bit r and small s^-1.
[OK]                ECDSA P384 test vectors (SHA384)                   328   329 - 100-bit r and small s^-1.
 ...                ECDSA P384 test vectors (SHA384)                   329   330 - small r and 100 bit s^-1.
[OK]                ECDSA P384 test vectors (SHA384)                   329   330 - small r and 100 bit s^-1.
 ...                ECDSA P384 test vectors (SHA384)                   330   331 - 100-bit r and s^-1.
[OK]                ECDSA P384 test vectors (SHA384)                   330   331 - 100-bit r and s^-1.
 ...                ECDSA P384 test vectors (SHA384)                   331   332 - r and s^-1 are close to n.
[OK]                ECDSA P384 test vectors (SHA384)                   331   332 - r and s^-1 are close to n.
 ...                ECDSA P384 test vectors (SHA384)                   332   333 - s == 1.
[OK]                ECDSA P384 test vectors (SHA384)                   332   333 - s == 1.
 ...                ECDSA P384 test vectors (SHA384)                   333   334 - s == 0.
[OK]                ECDSA P384 test vectors (SHA384)                   333   334 - s == 0.
 ...                ECDSA P384 test vectors (SHA384)                   334   335 - point at infinity during verify.
[OK]                ECDSA P384 test vectors (SHA384)                   334   335 - point at infinity during verify.
 ...                ECDSA P384 test vectors (SHA384)                   335   336 - edge case for signature malleability.
[OK]                ECDSA P384 test vectors (SHA384)                   335   336 - edge case for signature malleability.
 ...                ECDSA P384 test vectors (SHA384)                   336   337 - edge case for signature malleability.
[OK]                ECDSA P384 test vectors (SHA384)                   336   337 - edge case for signature malleability.
 ...                ECDSA P384 test vectors (SHA384)                   337   338 - u1 == 1.
[OK]                ECDSA P384 test vectors (SHA384)                   337   338 - u1 == 1.
 ...                ECDSA P384 test vectors (SHA384)                   338   339 - u1 == n - 1.
[OK]                ECDSA P384 test vectors (SHA384)                   338   339 - u1 == n - 1.
 ...                ECDSA P384 test vectors (SHA384)                   339   340 - u2 == 1.
[OK]                ECDSA P384 test vectors (SHA384)                   339   340 - u2 == 1.
 ...                ECDSA P384 test vectors (SHA384)                   340   341 - u2 == n - 1.
[OK]                ECDSA P384 test vectors (SHA384)                   340   341 - u2 == n - 1.
 ...                ECDSA P384 test vectors (SHA384)                   341   342 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA384)                   341   342 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA384)                   342   343 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA384)                   342   343 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA384)                   343   344 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA384)                   343   344 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA384)                   344   345 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA384)                   344   345 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA384)                   345   346 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA384)                   345   346 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA384)                   346   347 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA384)                   346   347 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA384)                   347   348 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA384)                   347   348 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA384)                   348   349 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA384)                   348   349 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA384)                   349   350 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA384)                   349   350 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA384)                   350   351 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA384)                   350   351 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA384)                   351   352 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA384)                   351   352 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA384)                   352   353 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA384)                   352   353 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA384)                   353   354 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA384)                   353   354 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA384)                   354   355 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA384)                   354   355 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA384)                   355   356 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA384)                   355   356 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA384)                   356   357 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA384)                   356   357 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA384)                   357   358 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA384)                   357   358 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA384)                   358   359 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA384)                   358   359 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA384)                   359   360 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA384)                   359   360 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA384)                   360   361 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA384)                   360   361 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA384)                   361   362 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA384)                   361   362 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA384)                   362   363 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA384)                   362   363 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA384)                   363   364 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA384)                   363   364 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA384)                   364   365 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA384)                   364   365 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA384)                   365   366 - point duplication during verification.
[OK]                ECDSA P384 test vectors (SHA384)                   365   366 - point duplication during verification.
 ...                ECDSA P384 test vectors (SHA384)                   366   367 - duplication bug.
[OK]                ECDSA P384 test vectors (SHA384)                   366   367 - duplication bug.
 ...                ECDSA P384 test vectors (SHA384)                   367   368 - point with x-coordinate 0.
[OK]                ECDSA P384 test vectors (SHA384)                   367   368 - point with x-coordinate 0.
 ...                ECDSA P384 test vectors (SHA384)                   368   369 - point with x-coordinate 0.
[OK]                ECDSA P384 test vectors (SHA384)                   368   369 - point with x-coordinate 0.
 ...                ECDSA P384 test vectors (SHA384)                   369   370 - comparison with point at infinity .
[OK]                ECDSA P384 test vectors (SHA384)                   369   370 - comparison with point at infinity .
 ...                ECDSA P384 test vectors (SHA384)                   370   371 - extreme value for k and edgecase s.
[OK]                ECDSA P384 test vectors (SHA384)                   370   371 - extreme value for k and edgecase s.
 ...                ECDSA P384 test vectors (SHA384)                   371   372 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA384)                   371   372 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA384)                   372   373 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA384)                   372   373 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA384)                   373   374 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA384)                   373   374 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA384)                   374   375 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA384)                   374   375 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA384)                   375   376 - extreme value for k.
[OK]                ECDSA P384 test vectors (SHA384)                   375   376 - extreme value for k.
 ...                ECDSA P384 test vectors (SHA384)                   376   377 - extreme value for k and edgecase s.
[OK]                ECDSA P384 test vectors (SHA384)                   376   377 - extreme value for k and edgecase s.
 ...                ECDSA P384 test vectors (SHA384)                   377   378 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA384)                   377   378 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA384)                   378   379 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA384)                   378   379 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA384)                   379   380 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA384)                   379   380 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA384)                   380   381 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA384)                   380   381 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA384)                   381   382 - extreme value for k.
[OK]                ECDSA P384 test vectors (SHA384)                   381   382 - extreme value for k.
 ...                ECDSA P384 test vectors (SHA384)                   382   383 - testing point duplication.
[OK]                ECDSA P384 test vectors (SHA384)                   382   383 - testing point duplication.
 ...                ECDSA P384 test vectors (SHA384)                   383   384 - testing point duplication.
[OK]                ECDSA P384 test vectors (SHA384)                   383   384 - testing point duplication.
 ...                ECDSA P384 test vectors (SHA384)                   384   385 - testing point duplication.
[OK]                ECDSA P384 test vectors (SHA384)                   384   385 - testing point duplication.
 ...                ECDSA P384 test vectors (SHA384)                   385   386 - testing point duplication.
[OK]                ECDSA P384 test vectors (SHA384)                   385   386 - testing point duplication.
 ...                ECDSA P384 test vectors (SHA384)                   386   387 - pseudorandom signature.
[OK]                ECDSA P384 test vectors (SHA384)                   386   387 - pseudorandom signature.
 ...                ECDSA P384 test vectors (SHA384)                   387   388 - pseudorandom signature.
[OK]                ECDSA P384 test vectors (SHA384)                   387   388 - pseudorandom signature.
 ...                ECDSA P384 test vectors (SHA384)                   388   389 - pseudorandom signature.
[OK]                ECDSA P384 test vectors (SHA384)                   388   389 - pseudorandom signature.
 ...                ECDSA P384 test vectors (SHA384)                   389   390 - pseudorandom signature.
[OK]                ECDSA P384 test vectors (SHA384)                   389   390 - pseudorandom signature.
 ...                ECDSA P384 test vectors (SHA384)                   390   391 - x-coordinate of the public key is large.
[OK]                ECDSA P384 test vectors (SHA384)                   390   391 - x-coordinate of the public key is large.
 ...                ECDSA P384 test vectors (SHA384)                   391   392 - x-coordinate of the public key is large.
[OK]                ECDSA P384 test vectors (SHA384)                   391   392 - x-coordinate of the public key is large.
 ...                ECDSA P384 test vectors (SHA384)                   392   393 - x-coordinate of the public key is large.
[OK]                ECDSA P384 test vectors (SHA384)                   392   393 - x-coordinate of the public key is large.
 ...                ECDSA P384 test vectors (SHA384)                   393   394 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P384 test vectors (SHA384)                   393   394 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA P384 test vectors (SHA384)                   394   395 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P384 test vectors (SHA384)                   394   395 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA P384 test vectors (SHA384)                   395   396 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P384 test vectors (SHA384)                   395   396 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA P384 test vectors (SHA384)                   396   397 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P384 test vectors (SHA384)                   396   397 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA P384 test vectors (SHA384)                   397   398 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P384 test vectors (SHA384)                   397   398 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA P384 test vectors (SHA384)                   398   399 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P384 test vectors (SHA384)                   398   399 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA P384 test vectors (SHA384)                   399   400 - x-coordinate of the public key is small.
[OK]                ECDSA P384 test vectors (SHA384)                   399   400 - x-coordinate of the public key is small.
 ...                ECDSA P384 test vectors (SHA384)                   400   401 - x-coordinate of the public key is small.
[OK]                ECDSA P384 test vectors (SHA384)                   400   401 - x-coordinate of the public key is small.
 ...                ECDSA P384 test vectors (SHA384)                   401   402 - x-coordinate of the public key is small.
[OK]                ECDSA P384 test vectors (SHA384)                   401   402 - x-coordinate of the public key is small.
 ...                ECDSA P384 test vectors (SHA384)                   402   403 - y-coordinate of the public key is small.
[OK]                ECDSA P384 test vectors (SHA384)                   402   403 - y-coordinate of the public key is small.
 ...                ECDSA P384 test vectors (SHA384)                   403   404 - y-coordinate of the public key is small.
[OK]                ECDSA P384 test vectors (SHA384)                   403   404 - y-coordinate of the public key is small.
 ...                ECDSA P384 test vectors (SHA384)                   404   405 - y-coordinate of the public key is small.
[OK]                ECDSA P384 test vectors (SHA384)                   404   405 - y-coordinate of the public key is small.
 ...                ECDSA P384 test vectors (SHA384)                   405   406 - y-coordinate of the public key is large.
[OK]                ECDSA P384 test vectors (SHA384)                   405   406 - y-coordinate of the public key is large.
 ...                ECDSA P384 test vectors (SHA384)                   406   407 - y-coordinate of the public key is large.
[OK]                ECDSA P384 test vectors (SHA384)                   406   407 - y-coordinate of the public key is large.
 ...                ECDSA P384 test vectors (SHA384)                   407   408 - y-coordinate of the public key is large.
[OK]                ECDSA P384 test vectors (SHA384)                   407   408 - y-coordinate of the public key is large.
 ...                ECDSA P384 test vectors (SHA512)                     0   1 - signature malleability.
[OK]                ECDSA P384 test vectors (SHA512)                     0   1 - signature malleability.
 ...                ECDSA P384 test vectors (SHA512)                     1   2 - Legacy:ASN encoding of r misses leading 0.
[OK]                ECDSA P384 test vectors (SHA512)                     1   2 - Legacy:ASN encoding of r misses leading 0.
 ...                ECDSA P384 test vectors (SHA512)                     2   3 - Legacy:ASN encoding of s misses leading 0.
[OK]                ECDSA P384 test vectors (SHA512)                     2   3 - Legacy:ASN encoding of s misses leading 0.
 ...                ECDSA P384 test vectors (SHA512)                     3   4 - valid.
[OK]                ECDSA P384 test vectors (SHA512)                     3   4 - valid.
 ...                ECDSA P384 test vectors (SHA512)                     4   5 - long form encoding of length of sequence.
[OK]                ECDSA P384 test vectors (SHA512)                     4   5 - long form encoding of length of sequence.
 ...                ECDSA P384 test vectors (SHA512)                     5   6 - length of sequence contains leading 0.
[OK]                ECDSA P384 test vectors (SHA512)                     5   6 - length of sequence contains leading 0.
 ...                ECDSA P384 test vectors (SHA512)                     6   7 - wrong length of sequence.
[OK]                ECDSA P384 test vectors (SHA512)                     6   7 - wrong length of sequence.
 ...                ECDSA P384 test vectors (SHA512)                     7   8 - wrong length of sequence.
[OK]                ECDSA P384 test vectors (SHA512)                     7   8 - wrong length of sequence.
 ...                ECDSA P384 test vectors (SHA512)                     8   9 - uint32 overflow in length of sequence.
[OK]                ECDSA P384 test vectors (SHA512)                     8   9 - uint32 overflow in length of sequence.
 ...                ECDSA P384 test vectors (SHA512)                     9   10 - uint64 overflow in length of sequence.
[OK]                ECDSA P384 test vectors (SHA512)                     9   10 - uint64 overflow in length of sequence.
 ...                ECDSA P384 test vectors (SHA512)                    10   11 - length of sequence = 2**31 - 1.
[OK]                ECDSA P384 test vectors (SHA512)                    10   11 - length of sequence = 2**31 - 1.
 ...                ECDSA P384 test vectors (SHA512)                    11   12 - length of sequence = 2**32 - 1.
[OK]                ECDSA P384 test vectors (SHA512)                    11   12 - length of sequence = 2**32 - 1.
 ...                ECDSA P384 test vectors (SHA512)                    12   13 - length of sequence = 2**40 - 1.
[OK]                ECDSA P384 test vectors (SHA512)                    12   13 - length of sequence = 2**40 - 1.
 ...                ECDSA P384 test vectors (SHA512)                    13   14 - length of sequence = 2**64 - 1.
[OK]                ECDSA P384 test vectors (SHA512)                    13   14 - length of sequence = 2**64 - 1.
 ...                ECDSA P384 test vectors (SHA512)                    14   15 - incorrect length of sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    14   15 - incorrect length of sequence.
 ...                ECDSA P384 test vectors (SHA512)                    15   16 - indefinite length without termination.
[OK]                ECDSA P384 test vectors (SHA512)                    15   16 - indefinite length without termination.
 ...                ECDSA P384 test vectors (SHA512)                    16   17 - indefinite length without termination.
[OK]                ECDSA P384 test vectors (SHA512)                    16   17 - indefinite length without termination.
 ...                ECDSA P384 test vectors (SHA512)                    17   18 - indefinite length without termination.
[OK]                ECDSA P384 test vectors (SHA512)                    17   18 - indefinite length without termination.
 ...                ECDSA P384 test vectors (SHA512)                    18   19 - removing sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    18   19 - removing sequence.
 ...                ECDSA P384 test vectors (SHA512)                    19   20 - lonely sequence tag.
[OK]                ECDSA P384 test vectors (SHA512)                    19   20 - lonely sequence tag.
 ...                ECDSA P384 test vectors (SHA512)                    20   21 - appending 0's to sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    20   21 - appending 0's to sequence.
 ...                ECDSA P384 test vectors (SHA512)                    21   22 - prepending 0's to sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    21   22 - prepending 0's to sequence.
 ...                ECDSA P384 test vectors (SHA512)                    22   23 - appending unused 0's to sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    22   23 - appending unused 0's to sequence.
 ...                ECDSA P384 test vectors (SHA512)                    23   24 - appending null value to sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    23   24 - appending null value to sequence.
 ...                ECDSA P384 test vectors (SHA512)                    24   25 - including garbage.
[OK]                ECDSA P384 test vectors (SHA512)                    24   25 - including garbage.
 ...                ECDSA P384 test vectors (SHA512)                    25   26 - including garbage.
[OK]                ECDSA P384 test vectors (SHA512)                    25   26 - including garbage.
 ...                ECDSA P384 test vectors (SHA512)                    26   27 - including garbage.
[OK]                ECDSA P384 test vectors (SHA512)                    26   27 - including garbage.
 ...                ECDSA P384 test vectors (SHA512)                    27   28 - including garbage.
[OK]                ECDSA P384 test vectors (SHA512)                    27   28 - including garbage.
 ...                ECDSA P384 test vectors (SHA512)                    28   29 - including garbage.
[OK]                ECDSA P384 test vectors (SHA512)                    28   29 - including garbage.
 ...                ECDSA P384 test vectors (SHA512)                    29   30 - including garbage.
[OK]                ECDSA P384 test vectors (SHA512)                    29   30 - including garbage.
 ...                ECDSA P384 test vectors (SHA512)                    30   31 - including garbage.
[OK]                ECDSA P384 test vectors (SHA512)                    30   31 - including garbage.
 ...                ECDSA P384 test vectors (SHA512)                    31   32 - including garbage.
[OK]                ECDSA P384 test vectors (SHA512)                    31   32 - including garbage.
 ...                ECDSA P384 test vectors (SHA512)                    32   33 - including garbage.
[OK]                ECDSA P384 test vectors (SHA512)                    32   33 - including garbage.
 ...                ECDSA P384 test vectors (SHA512)                    33   34 - including undefined tags.
[OK]                ECDSA P384 test vectors (SHA512)                    33   34 - including undefined tags.
 ...                ECDSA P384 test vectors (SHA512)                    34   35 - including undefined tags.
[OK]                ECDSA P384 test vectors (SHA512)                    34   35 - including undefined tags.
 ...                ECDSA P384 test vectors (SHA512)                    35   36 - including undefined tags.
[OK]                ECDSA P384 test vectors (SHA512)                    35   36 - including undefined tags.
 ...                ECDSA P384 test vectors (SHA512)                    36   37 - including undefined tags.
[OK]                ECDSA P384 test vectors (SHA512)                    36   37 - including undefined tags.
 ...                ECDSA P384 test vectors (SHA512)                    37   38 - including undefined tags.
[OK]                ECDSA P384 test vectors (SHA512)                    37   38 - including undefined tags.
 ...                ECDSA P384 test vectors (SHA512)                    38   39 - including undefined tags.
[OK]                ECDSA P384 test vectors (SHA512)                    38   39 - including undefined tags.
 ...                ECDSA P384 test vectors (SHA512)                    39   40 - truncated length of sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    39   40 - truncated length of sequence.
 ...                ECDSA P384 test vectors (SHA512)                    40   41 - using composition with indefinite length.
[OK]                ECDSA P384 test vectors (SHA512)                    40   41 - using composition with indefinite length.
 ...                ECDSA P384 test vectors (SHA512)                    41   42 - using composition with indefinite length.
[OK]                ECDSA P384 test vectors (SHA512)                    41   42 - using composition with indefinite length.
 ...                ECDSA P384 test vectors (SHA512)                    42   43 - using composition with indefinite length.
[OK]                ECDSA P384 test vectors (SHA512)                    42   43 - using composition with indefinite length.
 ...                ECDSA P384 test vectors (SHA512)                    43   44 - using composition with wrong tag.
[OK]                ECDSA P384 test vectors (SHA512)                    43   44 - using composition with wrong tag.
 ...                ECDSA P384 test vectors (SHA512)                    44   45 - using composition with wrong tag.
[OK]                ECDSA P384 test vectors (SHA512)                    44   45 - using composition with wrong tag.
 ...                ECDSA P384 test vectors (SHA512)                    45   46 - using composition with wrong tag.
[OK]                ECDSA P384 test vectors (SHA512)                    45   46 - using composition with wrong tag.
 ...                ECDSA P384 test vectors (SHA512)                    46   47 - Replacing sequence with NULL.
[OK]                ECDSA P384 test vectors (SHA512)                    46   47 - Replacing sequence with NULL.
 ...                ECDSA P384 test vectors (SHA512)                    47   48 - changing tag value of sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    47   48 - changing tag value of sequence.
 ...                ECDSA P384 test vectors (SHA512)                    48   49 - changing tag value of sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    48   49 - changing tag value of sequence.
 ...                ECDSA P384 test vectors (SHA512)                    49   50 - changing tag value of sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    49   50 - changing tag value of sequence.
 ...                ECDSA P384 test vectors (SHA512)                    50   51 - changing tag value of sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    50   51 - changing tag value of sequence.
 ...                ECDSA P384 test vectors (SHA512)                    51   52 - changing tag value of sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    51   52 - changing tag value of sequence.
 ...                ECDSA P384 test vectors (SHA512)                    52   53 - dropping value of sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    52   53 - dropping value of sequence.
 ...                ECDSA P384 test vectors (SHA512)                    53   54 - using composition for sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    53   54 - using composition for sequence.
 ...                ECDSA P384 test vectors (SHA512)                    54   55 - truncated sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    54   55 - truncated sequence.
 ...                ECDSA P384 test vectors (SHA512)                    55   56 - truncated sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    55   56 - truncated sequence.
 ...                ECDSA P384 test vectors (SHA512)                    56   57 - indefinite length.
[OK]                ECDSA P384 test vectors (SHA512)                    56   57 - indefinite length.
 ...                ECDSA P384 test vectors (SHA512)                    57   58 - indefinite length with truncated delimiter.
[OK]                ECDSA P384 test vectors (SHA512)                    57   58 - indefinite length with truncated delimiter.
 ...                ECDSA P384 test vectors (SHA512)                    58   59 - indefinite length with additional element.
[OK]                ECDSA P384 test vectors (SHA512)                    58   59 - indefinite length with additional element.
 ...                ECDSA P384 test vectors (SHA512)                    59   60 - indefinite length with truncated element.
[OK]                ECDSA P384 test vectors (SHA512)                    59   60 - indefinite length with truncated element.
 ...                ECDSA P384 test vectors (SHA512)                    60   61 - indefinite length with garbage.
[OK]                ECDSA P384 test vectors (SHA512)                    60   61 - indefinite length with garbage.
 ...                ECDSA P384 test vectors (SHA512)                    61   62 - indefinite length with nonempty EOC.
[OK]                ECDSA P384 test vectors (SHA512)                    61   62 - indefinite length with nonempty EOC.
 ...                ECDSA P384 test vectors (SHA512)                    62   63 - prepend empty sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    62   63 - prepend empty sequence.
 ...                ECDSA P384 test vectors (SHA512)                    63   64 - append empty sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    63   64 - append empty sequence.
 ...                ECDSA P384 test vectors (SHA512)                    64   65 - append garbage with high tag number.
[OK]                ECDSA P384 test vectors (SHA512)                    64   65 - append garbage with high tag number.
 ...                ECDSA P384 test vectors (SHA512)                    65   66 - sequence of sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    65   66 - sequence of sequence.
 ...                ECDSA P384 test vectors (SHA512)                    66   67 - truncated sequence: removed last 1 elements.
[OK]                ECDSA P384 test vectors (SHA512)                    66   67 - truncated sequence: removed last 1 elements.
 ...                ECDSA P384 test vectors (SHA512)                    67   68 - repeating element in sequence.
[OK]                ECDSA P384 test vectors (SHA512)                    67   68 - repeating element in sequence.
 ...                ECDSA P384 test vectors (SHA512)                    68   69 - long form encoding of length of integer.
[OK]                ECDSA P384 test vectors (SHA512)                    68   69 - long form encoding of length of integer.
 ...                ECDSA P384 test vectors (SHA512)                    69   70 - long form encoding of length of integer.
[OK]                ECDSA P384 test vectors (SHA512)                    69   70 - long form encoding of length of integer.
 ...                ECDSA P384 test vectors (SHA512)                    70   71 - length of integer contains leading 0.
[OK]                ECDSA P384 test vectors (SHA512)                    70   71 - length of integer contains leading 0.
 ...                ECDSA P384 test vectors (SHA512)                    71   72 - length of integer contains leading 0.
[OK]                ECDSA P384 test vectors (SHA512)                    71   72 - length of integer contains leading 0.
 ...                ECDSA P384 test vectors (SHA512)                    72   73 - wrong length of integer.
[OK]                ECDSA P384 test vectors (SHA512)                    72   73 - wrong length of integer.
 ...                ECDSA P384 test vectors (SHA512)                    73   74 - wrong length of integer.
[OK]                ECDSA P384 test vectors (SHA512)                    73   74 - wrong length of integer.
 ...                ECDSA P384 test vectors (SHA512)                    74   75 - wrong length of integer.
[OK]                ECDSA P384 test vectors (SHA512)                    74   75 - wrong length of integer.
 ...                ECDSA P384 test vectors (SHA512)                    75   76 - wrong length of integer.
[OK]                ECDSA P384 test vectors (SHA512)                    75   76 - wrong length of integer.
 ...                ECDSA P384 test vectors (SHA512)                    76   77 - uint32 overflow in length of integer.
[OK]                ECDSA P384 test vectors (SHA512)                    76   77 - uint32 overflow in length of integer.
 ...                ECDSA P384 test vectors (SHA512)                    77   78 - uint32 overflow in length of integer.
[OK]                ECDSA P384 test vectors (SHA512)                    77   78 - uint32 overflow in length of integer.
 ...                ECDSA P384 test vectors (SHA512)                    78   79 - uint64 overflow in length of integer.
[OK]                ECDSA P384 test vectors (SHA512)                    78   79 - uint64 overflow in length of integer.
 ...                ECDSA P384 test vectors (SHA512)                    79   80 - uint64 overflow in length of integer.
[OK]                ECDSA P384 test vectors (SHA512)                    79   80 - uint64 overflow in length of integer.
 ...                ECDSA P384 test vectors (SHA512)                    80   81 - length of integer = 2**31 - 1.
[OK]                ECDSA P384 test vectors (SHA512)                    80   81 - length of integer = 2**31 - 1.
 ...                ECDSA P384 test vectors (SHA512)                    81   82 - length of integer = 2**31 - 1.
[OK]                ECDSA P384 test vectors (SHA512)                    81   82 - length of integer = 2**31 - 1.
 ...                ECDSA P384 test vectors (SHA512)                    82   83 - length of integer = 2**32 - 1.
[OK]                ECDSA P384 test vectors (SHA512)                    82   83 - length of integer = 2**32 - 1.
 ...                ECDSA P384 test vectors (SHA512)                    83   84 - length of integer = 2**32 - 1.
[OK]                ECDSA P384 test vectors (SHA512)                    83   84 - length of integer = 2**32 - 1.
 ...                ECDSA P384 test vectors (SHA512)                    84   85 - length of integer = 2**40 - 1.
[OK]                ECDSA P384 test vectors (SHA512)                    84   85 - length of integer = 2**40 - 1.
 ...                ECDSA P384 test vectors (SHA512)                    85   86 - length of integer = 2**40 - 1.
[OK]                ECDSA P384 test vectors (SHA512)                    85   86 - length of integer = 2**40 - 1.
 ...                ECDSA P384 test vectors (SHA512)                    86   87 - length of integer = 2**64 - 1.
[OK]                ECDSA P384 test vectors (SHA512)                    86   87 - length of integer = 2**64 - 1.
 ...                ECDSA P384 test vectors (SHA512)                    87   88 - length of integer = 2**64 - 1.
[OK]                ECDSA P384 test vectors (SHA512)                    87   88 - length of integer = 2**64 - 1.
 ...                ECDSA P384 test vectors (SHA512)                    88   89 - incorrect length of integer.
[OK]                ECDSA P384 test vectors (SHA512)                    88   89 - incorrect length of integer.
 ...                ECDSA P384 test vectors (SHA512)                    89   90 - incorrect length of integer.
[OK]                ECDSA P384 test vectors (SHA512)                    89   90 - incorrect length of integer.
 ...                ECDSA P384 test vectors (SHA512)                    90   91 - removing integer.
[OK]                ECDSA P384 test vectors (SHA512)                    90   91 - removing integer.
 ...                ECDSA P384 test vectors (SHA512)                    91   92 - lonely integer tag.
[OK]                ECDSA P384 test vectors (SHA512)                    91   92 - lonely integer tag.
 ...                ECDSA P384 test vectors (SHA512)                    92   93 - lonely integer tag.
[OK]                ECDSA P384 test vectors (SHA512)                    92   93 - lonely integer tag.
 ...                ECDSA P384 test vectors (SHA512)                    93   94 - appending 0's to integer.
[OK]                ECDSA P384 test vectors (SHA512)                    93   94 - appending 0's to integer.
 ...                ECDSA P384 test vectors (SHA512)                    94   95 - appending 0's to integer.
[OK]                ECDSA P384 test vectors (SHA512)                    94   95 - appending 0's to integer.
 ...                ECDSA P384 test vectors (SHA512)                    95   96 - prepending 0's to integer.
[OK]                ECDSA P384 test vectors (SHA512)                    95   96 - prepending 0's to integer.
 ...                ECDSA P384 test vectors (SHA512)                    96   97 - prepending 0's to integer.
[OK]                ECDSA P384 test vectors (SHA512)                    96   97 - prepending 0's to integer.
 ...                ECDSA P384 test vectors (SHA512)                    97   98 - appending unused 0's to integer.
[OK]                ECDSA P384 test vectors (SHA512)                    97   98 - appending unused 0's to integer.
 ...                ECDSA P384 test vectors (SHA512)                    98   99 - appending null value to integer.
[OK]                ECDSA P384 test vectors (SHA512)                    98   99 - appending null value to integer.
 ...                ECDSA P384 test vectors (SHA512)                    99   100 - appending null value to integer.
[OK]                ECDSA P384 test vectors (SHA512)                    99   100 - appending null value to integer.
 ...                ECDSA P384 test vectors (SHA512)                   100   101 - truncated length of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   100   101 - truncated length of integer.
 ...                ECDSA P384 test vectors (SHA512)                   101   102 - truncated length of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   101   102 - truncated length of integer.
 ...                ECDSA P384 test vectors (SHA512)                   102   103 - Replacing integer with NULL.
[OK]                ECDSA P384 test vectors (SHA512)                   102   103 - Replacing integer with NULL.
 ...                ECDSA P384 test vectors (SHA512)                   103   104 - Replacing integer with NULL.
[OK]                ECDSA P384 test vectors (SHA512)                   103   104 - Replacing integer with NULL.
 ...                ECDSA P384 test vectors (SHA512)                   104   105 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   104   105 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA512)                   105   106 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   105   106 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA512)                   106   107 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   106   107 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA512)                   107   108 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   107   108 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA512)                   108   109 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   108   109 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA512)                   109   110 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   109   110 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA512)                   110   111 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   110   111 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA512)                   111   112 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   111   112 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA512)                   112   113 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   112   113 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA512)                   113   114 - changing tag value of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   113   114 - changing tag value of integer.
 ...                ECDSA P384 test vectors (SHA512)                   114   115 - dropping value of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   114   115 - dropping value of integer.
 ...                ECDSA P384 test vectors (SHA512)                   115   116 - dropping value of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   115   116 - dropping value of integer.
 ...                ECDSA P384 test vectors (SHA512)                   116   117 - using composition for integer.
[OK]                ECDSA P384 test vectors (SHA512)                   116   117 - using composition for integer.
 ...                ECDSA P384 test vectors (SHA512)                   117   118 - using composition for integer.
[OK]                ECDSA P384 test vectors (SHA512)                   117   118 - using composition for integer.
 ...                ECDSA P384 test vectors (SHA512)                   118   119 - modify first byte of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   118   119 - modify first byte of integer.
 ...                ECDSA P384 test vectors (SHA512)                   119   120 - modify first byte of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   119   120 - modify first byte of integer.
 ...                ECDSA P384 test vectors (SHA512)                   120   121 - modify last byte of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   120   121 - modify last byte of integer.
 ...                ECDSA P384 test vectors (SHA512)                   121   122 - modify last byte of integer.
[OK]                ECDSA P384 test vectors (SHA512)                   121   122 - modify last byte of integer.
 ...                ECDSA P384 test vectors (SHA512)                   122   123 - truncated integer.
[OK]                ECDSA P384 test vectors (SHA512)                   122   123 - truncated integer.
 ...                ECDSA P384 test vectors (SHA512)                   123   124 - truncated integer.
[OK]                ECDSA P384 test vectors (SHA512)                   123   124 - truncated integer.
 ...                ECDSA P384 test vectors (SHA512)                   124   125 - leading ff in integer.
[OK]                ECDSA P384 test vectors (SHA512)                   124   125 - leading ff in integer.
 ...                ECDSA P384 test vectors (SHA512)                   125   126 - leading ff in integer.
[OK]                ECDSA P384 test vectors (SHA512)                   125   126 - leading ff in integer.
 ...                ECDSA P384 test vectors (SHA512)                   126   127 - replaced integer by infinity.
[OK]                ECDSA P384 test vectors (SHA512)                   126   127 - replaced integer by infinity.
 ...                ECDSA P384 test vectors (SHA512)                   127   128 - replaced integer by infinity.
[OK]                ECDSA P384 test vectors (SHA512)                   127   128 - replaced integer by infinity.
 ...                ECDSA P384 test vectors (SHA512)                   128   129 - replacing integer with zero.
[OK]                ECDSA P384 test vectors (SHA512)                   128   129 - replacing integer with zero.
 ...                ECDSA P384 test vectors (SHA512)                   129   130 - replacing integer with zero.
[OK]                ECDSA P384 test vectors (SHA512)                   129   130 - replacing integer with zero.
 ...                ECDSA P384 test vectors (SHA512)                   130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA512)                   130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA512)                   131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA512)                   131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA512)                   132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA512)                   132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA512)                   133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA512)                   133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA512)                   134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA512)                   134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA512)                   135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA512)                   135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA512)                   136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA512)                   136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA512)                   137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA512)                   137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA512)                   138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA512)                   138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA512)                   139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA512)                   139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA512)                   140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA512)                   140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA512)                   141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA512)                   141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA512)                   142   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P384 test vectors (SHA512)                   142   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P384 test vectors (SHA512)                   143   144 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   143   144 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   144   145 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   144   145 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   145   146 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   145   146 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   146   147 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   146   147 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   147   148 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   147   148 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   148   149 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   148   149 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   149   150 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   149   150 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   150   151 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   150   151 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   151   152 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   151   152 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   152   153 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   152   153 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   153   154 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   153   154 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   154   155 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   154   155 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   155   156 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   155   156 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   156   157 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   156   157 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   157   158 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   157   158 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   158   159 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   158   159 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   159   160 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   159   160 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   160   161 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   160   161 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   161   162 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   161   162 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   162   163 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   162   163 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   163   164 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   163   164 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   164   165 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   164   165 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   165   166 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   165   166 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   166   167 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   166   167 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   167   168 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   167   168 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   168   169 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   168   169 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   169   170 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   169   170 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   170   171 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   170   171 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   171   172 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   171   172 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   172   173 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   172   173 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   173   174 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   173   174 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   174   175 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   174   175 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   175   176 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   175   176 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   176   177 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   176   177 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   177   178 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   177   178 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   178   179 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   178   179 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   179   180 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   179   180 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   180   181 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   180   181 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   181   182 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   181   182 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   182   183 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   182   183 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   183   184 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   183   184 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   184   185 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   184   185 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   185   186 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   185   186 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   186   187 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   186   187 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   187   188 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   187   188 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   188   189 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   188   189 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   189   190 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   189   190 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   190   191 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   190   191 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   191   192 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   191   192 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   192   193 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   192   193 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   193   194 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   193   194 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   194   195 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   194   195 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   195   196 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   195   196 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   196   197 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   196   197 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   197   198 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   197   198 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   198   199 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   198   199 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   199   200 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   199   200 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   200   201 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   200   201 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   201   202 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   201   202 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   202   203 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   202   203 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   203   204 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   203   204 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   204   205 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   204   205 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   205   206 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   205   206 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   206   207 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   206   207 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   207   208 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   207   208 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   208   209 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   208   209 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   209   210 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   209   210 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   210   211 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   210   211 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   211   212 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   211   212 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   212   213 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   212   213 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   213   214 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   213   214 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   214   215 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   214   215 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   215   216 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   215   216 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   216   217 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   216   217 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   217   218 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   217   218 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   218   219 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   218   219 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   219   220 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   219   220 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   220   221 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   220   221 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   221   222 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   221   222 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   222   223 - Signature with special case values for r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   222   223 - Signature with special case values for r and s.
 ...                ECDSA P384 test vectors (SHA512)                   223   224 - Signature encoding contains wrong types.
[OK]                ECDSA P384 test vectors (SHA512)                   223   224 - Signature encoding contains wrong types.
 ...                ECDSA P384 test vectors (SHA512)                   224   225 - Signature encoding contains wrong types.
[OK]                ECDSA P384 test vectors (SHA512)                   224   225 - Signature encoding contains wrong types.
 ...                ECDSA P384 test vectors (SHA512)                   225   226 - Signature encoding contains wrong types.
[OK]                ECDSA P384 test vectors (SHA512)                   225   226 - Signature encoding contains wrong types.
 ...                ECDSA P384 test vectors (SHA512)                   226   227 - Signature encoding contains wrong types.
[OK]                ECDSA P384 test vectors (SHA512)                   226   227 - Signature encoding contains wrong types.
 ...                ECDSA P384 test vectors (SHA512)                   227   228 - Signature encoding contains wrong types.
[OK]                ECDSA P384 test vectors (SHA512)                   227   228 - Signature encoding contains wrong types.
 ...                ECDSA P384 test vectors (SHA512)                   228   229 - Signature encoding contains wrong types.
[OK]                ECDSA P384 test vectors (SHA512)                   228   229 - Signature encoding contains wrong types.
 ...                ECDSA P384 test vectors (SHA512)                   229   230 - Edge case for Shamir multiplication.
[OK]                ECDSA P384 test vectors (SHA512)                   229   230 - Edge case for Shamir multiplication.
 ...                ECDSA P384 test vectors (SHA512)                   230   231 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   230   231 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   231   232 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   231   232 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   232   233 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   232   233 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   233   234 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   233   234 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   234   235 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   234   235 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   235   236 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   235   236 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   236   237 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   236   237 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   237   238 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   237   238 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   238   239 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   238   239 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   239   240 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   239   240 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   240   241 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   240   241 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   241   242 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   241   242 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   242   243 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   242   243 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   243   244 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   243   244 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   244   245 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   244   245 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   245   246 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   245   246 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   246   247 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   246   247 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   247   248 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   247   248 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   248   249 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   248   249 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   249   250 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   249   250 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   250   251 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   250   251 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   251   252 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   251   252 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   252   253 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   252   253 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   253   254 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   253   254 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   254   255 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   254   255 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   255   256 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   255   256 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   256   257 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   256   257 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   257   258 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   257   258 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   258   259 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   258   259 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   259   260 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   259   260 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   260   261 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   260   261 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   261   262 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   261   262 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   262   263 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   262   263 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   263   264 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   263   264 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   264   265 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   264   265 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   265   266 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   265   266 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   266   267 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   266   267 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   267   268 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   267   268 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   268   269 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   268   269 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   269   270 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   269   270 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   270   271 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   270   271 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   271   272 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   271   272 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   272   273 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   272   273 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   273   274 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   273   274 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   274   275 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   274   275 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   275   276 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   275   276 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   276   277 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   276   277 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   277   278 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   277   278 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   278   279 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   278   279 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   279   280 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   279   280 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   280   281 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   280   281 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   281   282 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   281   282 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   282   283 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   282   283 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   283   284 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   283   284 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   284   285 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   284   285 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   285   286 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   285   286 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   286   287 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   286   287 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   287   288 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   287   288 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   288   289 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   288   289 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   289   290 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   289   290 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   290   291 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   290   291 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   291   292 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   291   292 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   292   293 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   292   293 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   293   294 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   293   294 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   294   295 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   294   295 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   295   296 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   295   296 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   296   297 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   296   297 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   297   298 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   297   298 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   298   299 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   298   299 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   299   300 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   299   300 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   300   301 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   300   301 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   301   302 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   301   302 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   302   303 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   302   303 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   303   304 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   303   304 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   304   305 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   304   305 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   305   306 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   305   306 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   306   307 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   306   307 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   307   308 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   307   308 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   308   309 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   308   309 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   309   310 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   309   310 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   310   311 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   310   311 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   311   312 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   311   312 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   312   313 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   312   313 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   313   314 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   313   314 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   314   315 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   314   315 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   315   316 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   315   316 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   316   317 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   316   317 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   317   318 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   317   318 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   318   319 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   318   319 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   319   320 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   319   320 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   320   321 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   320   321 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   321   322 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   321   322 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   322   323 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   322   323 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   323   324 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   323   324 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   324   325 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   324   325 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   325   326 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   325   326 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   326   327 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   326   327 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   327   328 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   327   328 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   328   329 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   328   329 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   329   330 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   329   330 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   330   331 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   330   331 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   331   332 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   331   332 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   332   333 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   332   333 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   333   334 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   333   334 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   334   335 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   334   335 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   335   336 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   335   336 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   336   337 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   336   337 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   337   338 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   337   338 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   338   339 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   338   339 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   339   340 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   339   340 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   340   341 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   340   341 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   341   342 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   341   342 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   342   343 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   342   343 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   343   344 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   343   344 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   344   345 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   344   345 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   345   346 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   345   346 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   346   347 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   346   347 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   347   348 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   347   348 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   348   349 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   348   349 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   349   350 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   349   350 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   350   351 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   350   351 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   351   352 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   351   352 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   352   353 - special case hash.
[OK]                ECDSA P384 test vectors (SHA512)                   352   353 - special case hash.
 ...                ECDSA P384 test vectors (SHA512)                   353   354 - Signature generated without truncating the hash.
[OK]                ECDSA P384 test vectors (SHA512)                   353   354 - Signature generated without truncating the hash.
 ...                ECDSA P384 test vectors (SHA512)                   354   355 - k*G has a large x-coordinate.
[OK]                ECDSA P384 test vectors (SHA512)                   354   355 - k*G has a large x-coordinate.
 ...                ECDSA P384 test vectors (SHA512)                   355   356 - r too large.
[OK]                ECDSA P384 test vectors (SHA512)                   355   356 - r too large.
 ...                ECDSA P384 test vectors (SHA512)                   356   357 - r,s are large.
[OK]                ECDSA P384 test vectors (SHA512)                   356   357 - r,s are large.
 ...                ECDSA P384 test vectors (SHA512)                   357   358 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA P384 test vectors (SHA512)                   357   358 - r and s^-1 have a large Hamming weight.
 ...                ECDSA P384 test vectors (SHA512)                   358   359 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA P384 test vectors (SHA512)                   358   359 - r and s^-1 have a large Hamming weight.
 ...                ECDSA P384 test vectors (SHA512)                   359   360 - small r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   359   360 - small r and s.
 ...                ECDSA P384 test vectors (SHA512)                   360   361 - small r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   360   361 - small r and s.
 ...                ECDSA P384 test vectors (SHA512)                   361   362 - small r and s.
[OK]                ECDSA P384 test vectors (SHA512)                   361   362 - small r and s.
 ...                ECDSA P384 test vectors (SHA512)                   362   363 - r is larger than n.
[OK]                ECDSA P384 test vectors (SHA512)                   362   363 - r is larger than n.
 ...                ECDSA P384 test vectors (SHA512)                   363   364 - s is larger than n.
[OK]                ECDSA P384 test vectors (SHA512)                   363   364 - s is larger than n.
 ...                ECDSA P384 test vectors (SHA512)                   364   365 - small r and s^-1.
[OK]                ECDSA P384 test vectors (SHA512)                   364   365 - small r and s^-1.
 ...                ECDSA P384 test vectors (SHA512)                   365   366 - smallish r and s^-1.
[OK]                ECDSA P384 test vectors (SHA512)                   365   366 - smallish r and s^-1.
 ...                ECDSA P384 test vectors (SHA512)                   366   367 - 100-bit r and small s^-1.
[OK]                ECDSA P384 test vectors (SHA512)                   366   367 - 100-bit r and small s^-1.
 ...                ECDSA P384 test vectors (SHA512)                   367   368 - small r and 100 bit s^-1.
[OK]                ECDSA P384 test vectors (SHA512)                   367   368 - small r and 100 bit s^-1.
 ...                ECDSA P384 test vectors (SHA512)                   368   369 - 100-bit r and s^-1.
[OK]                ECDSA P384 test vectors (SHA512)                   368   369 - 100-bit r and s^-1.
 ...                ECDSA P384 test vectors (SHA512)                   369   370 - r and s^-1 are close to n.
[OK]                ECDSA P384 test vectors (SHA512)                   369   370 - r and s^-1 are close to n.
 ...                ECDSA P384 test vectors (SHA512)                   370   371 - s == 1.
[OK]                ECDSA P384 test vectors (SHA512)                   370   371 - s == 1.
 ...                ECDSA P384 test vectors (SHA512)                   371   372 - s == 0.
[OK]                ECDSA P384 test vectors (SHA512)                   371   372 - s == 0.
 ...                ECDSA P384 test vectors (SHA512)                   372   373 - point at infinity during verify.
[OK]                ECDSA P384 test vectors (SHA512)                   372   373 - point at infinity during verify.
 ...                ECDSA P384 test vectors (SHA512)                   373   374 - edge case for signature malleability.
[OK]                ECDSA P384 test vectors (SHA512)                   373   374 - edge case for signature malleability.
 ...                ECDSA P384 test vectors (SHA512)                   374   375 - edge case for signature malleability.
[OK]                ECDSA P384 test vectors (SHA512)                   374   375 - edge case for signature malleability.
 ...                ECDSA P384 test vectors (SHA512)                   375   376 - u1 == 1.
[OK]                ECDSA P384 test vectors (SHA512)                   375   376 - u1 == 1.
 ...                ECDSA P384 test vectors (SHA512)                   376   377 - u1 == n - 1.
[OK]                ECDSA P384 test vectors (SHA512)                   376   377 - u1 == n - 1.
 ...                ECDSA P384 test vectors (SHA512)                   377   378 - u2 == 1.
[OK]                ECDSA P384 test vectors (SHA512)                   377   378 - u2 == 1.
 ...                ECDSA P384 test vectors (SHA512)                   378   379 - u2 == n - 1.
[OK]                ECDSA P384 test vectors (SHA512)                   378   379 - u2 == n - 1.
 ...                ECDSA P384 test vectors (SHA512)                   379   380 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA512)                   379   380 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA512)                   380   381 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA512)                   380   381 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA512)                   381   382 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA512)                   381   382 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA512)                   382   383 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA512)                   382   383 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA512)                   383   384 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA512)                   383   384 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA512)                   384   385 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA512)                   384   385 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA512)                   385   386 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA512)                   385   386 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA512)                   386   387 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA512)                   386   387 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA512)                   387   388 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA512)                   387   388 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA512)                   388   389 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA512)                   388   389 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA512)                   389   390 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA512)                   389   390 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA512)                   390   391 - edge case for u1.
[OK]                ECDSA P384 test vectors (SHA512)                   390   391 - edge case for u1.
 ...                ECDSA P384 test vectors (SHA512)                   391   392 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA512)                   391   392 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA512)                   392   393 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA512)                   392   393 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA512)                   393   394 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA512)                   393   394 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA512)                   394   395 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA512)                   394   395 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA512)                   395   396 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA512)                   395   396 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA512)                   396   397 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA512)                   396   397 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA512)                   397   398 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA512)                   397   398 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA512)                   398   399 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA512)                   398   399 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA512)                   399   400 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA512)                   399   400 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA512)                   400   401 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA512)                   400   401 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA512)                   401   402 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA512)                   401   402 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA512)                   402   403 - edge case for u2.
[OK]                ECDSA P384 test vectors (SHA512)                   402   403 - edge case for u2.
 ...                ECDSA P384 test vectors (SHA512)                   403   404 - point duplication during verification.
[OK]                ECDSA P384 test vectors (SHA512)                   403   404 - point duplication during verification.
 ...                ECDSA P384 test vectors (SHA512)                   404   405 - duplication bug.
[OK]                ECDSA P384 test vectors (SHA512)                   404   405 - duplication bug.
 ...                ECDSA P384 test vectors (SHA512)                   405   406 - point with x-coordinate 0.
[OK]                ECDSA P384 test vectors (SHA512)                   405   406 - point with x-coordinate 0.
 ...                ECDSA P384 test vectors (SHA512)                   406   407 - point with x-coordinate 0.
[OK]                ECDSA P384 test vectors (SHA512)                   406   407 - point with x-coordinate 0.
 ...                ECDSA P384 test vectors (SHA512)                   407   408 - comparison with point at infinity .
[OK]                ECDSA P384 test vectors (SHA512)                   407   408 - comparison with point at infinity .
 ...                ECDSA P384 test vectors (SHA512)                   408   409 - extreme value for k and edgecase s.
[OK]                ECDSA P384 test vectors (SHA512)                   408   409 - extreme value for k and edgecase s.
 ...                ECDSA P384 test vectors (SHA512)                   409   410 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA512)                   409   410 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA512)                   410   411 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA512)                   410   411 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA512)                   411   412 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA512)                   411   412 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA512)                   412   413 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA512)                   412   413 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA512)                   413   414 - extreme value for k.
[OK]                ECDSA P384 test vectors (SHA512)                   413   414 - extreme value for k.
 ...                ECDSA P384 test vectors (SHA512)                   414   415 - extreme value for k and edgecase s.
[OK]                ECDSA P384 test vectors (SHA512)                   414   415 - extreme value for k and edgecase s.
 ...                ECDSA P384 test vectors (SHA512)                   415   416 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA512)                   415   416 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA512)                   416   417 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA512)                   416   417 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA512)                   417   418 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA512)                   417   418 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA512)                   418   419 - extreme value for k and s^-1.
[OK]                ECDSA P384 test vectors (SHA512)                   418   419 - extreme value for k and s^-1.
 ...                ECDSA P384 test vectors (SHA512)                   419   420 - extreme value for k.
[OK]                ECDSA P384 test vectors (SHA512)                   419   420 - extreme value for k.
 ...                ECDSA P384 test vectors (SHA512)                   420   421 - testing point duplication.
[OK]                ECDSA P384 test vectors (SHA512)                   420   421 - testing point duplication.
 ...                ECDSA P384 test vectors (SHA512)                   421   422 - testing point duplication.
[OK]                ECDSA P384 test vectors (SHA512)                   421   422 - testing point duplication.
 ...                ECDSA P384 test vectors (SHA512)                   422   423 - testing point duplication.
[OK]                ECDSA P384 test vectors (SHA512)                   422   423 - testing point duplication.
 ...                ECDSA P384 test vectors (SHA512)                   423   424 - testing point duplication.
[OK]                ECDSA P384 test vectors (SHA512)                   423   424 - testing point duplication.
 ...                ECDSA P384 test vectors (SHA512)                   424   425 - pseudorandom signature.
[OK]                ECDSA P384 test vectors (SHA512)                   424   425 - pseudorandom signature.
 ...                ECDSA P384 test vectors (SHA512)                   425   426 - pseudorandom signature.
[OK]                ECDSA P384 test vectors (SHA512)                   425   426 - pseudorandom signature.
 ...                ECDSA P384 test vectors (SHA512)                   426   427 - pseudorandom signature.
[OK]                ECDSA P384 test vectors (SHA512)                   426   427 - pseudorandom signature.
 ...                ECDSA P384 test vectors (SHA512)                   427   428 - pseudorandom signature.
[OK]                ECDSA P384 test vectors (SHA512)                   427   428 - pseudorandom signature.
 ...                ECDSA P384 test vectors (SHA512)                   428   429 - x-coordinate of the public key is large.
[OK]                ECDSA P384 test vectors (SHA512)                   428   429 - x-coordinate of the public key is large.
 ...                ECDSA P384 test vectors (SHA512)                   429   430 - x-coordinate of the public key is large.
[OK]                ECDSA P384 test vectors (SHA512)                   429   430 - x-coordinate of the public key is large.
 ...                ECDSA P384 test vectors (SHA512)                   430   431 - x-coordinate of the public key is large.
[OK]                ECDSA P384 test vectors (SHA512)                   430   431 - x-coordinate of the public key is large.
 ...                ECDSA P384 test vectors (SHA512)                   431   432 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P384 test vectors (SHA512)                   431   432 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA P384 test vectors (SHA512)                   432   433 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P384 test vectors (SHA512)                   432   433 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA P384 test vectors (SHA512)                   433   434 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P384 test vectors (SHA512)                   433   434 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA P384 test vectors (SHA512)                   434   435 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P384 test vectors (SHA512)                   434   435 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA P384 test vectors (SHA512)                   435   436 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P384 test vectors (SHA512)                   435   436 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA P384 test vectors (SHA512)                   436   437 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA P384 test vectors (SHA512)                   436   437 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA P384 test vectors (SHA512)                   437   438 - x-coordinate of the public key is small.
[OK]                ECDSA P384 test vectors (SHA512)                   437   438 - x-coordinate of the public key is small.
 ...                ECDSA P384 test vectors (SHA512)                   438   439 - x-coordinate of the public key is small.
[OK]                ECDSA P384 test vectors (SHA512)                   438   439 - x-coordinate of the public key is small.
 ...                ECDSA P384 test vectors (SHA512)                   439   440 - x-coordinate of the public key is small.
[OK]                ECDSA P384 test vectors (SHA512)                   439   440 - x-coordinate of the public key is small.
 ...                ECDSA P384 test vectors (SHA512)                   440   441 - y-coordinate of the public key is small.
[OK]                ECDSA P384 test vectors (SHA512)                   440   441 - y-coordinate of the public key is small.
 ...                ECDSA P384 test vectors (SHA512)                   441   442 - y-coordinate of the public key is small.
[OK]                ECDSA P384 test vectors (SHA512)                   441   442 - y-coordinate of the public key is small.
 ...                ECDSA P384 test vectors (SHA512)                   442   443 - y-coordinate of the public key is small.
[OK]                ECDSA P384 test vectors (SHA512)                   442   443 - y-coordinate of the public key is small.
 ...                ECDSA P384 test vectors (SHA512)                   443   444 - y-coordinate of the public key is large.
[OK]                ECDSA P384 test vectors (SHA512)                   443   444 - y-coordinate of the public key is large.
 ...                ECDSA P384 test vectors (SHA512)                   444   445 - y-coordinate of the public key is large.
[OK]                ECDSA P384 test vectors (SHA512)                   444   445 - y-coordinate of the public key is large.
 ...                ECDSA P384 test vectors (SHA512)                   445   446 - y-coordinate of the public key is large.
[OK]                ECDSA P384 test vectors (SHA512)                   445   446 - y-coordinate of the public key is large.
 ...                ECDH P521 test vectors                               0   1 - normal case.
[OK]                ECDH P521 test vectors                               0   1 - normal case.
 ...                ECDH P521 test vectors                               1   2 - compressed public key.
[OK]                ECDH P521 test vectors                               1   2 - compressed public key.
 ...                ECDH P521 test vectors                               2   3 - edge case for shared secret.
[OK]                ECDH P521 test vectors                               2   3 - edge case for shared secret.
 ...                ECDH P521 test vectors                               3   4 - edge case for shared secret.
[OK]                ECDH P521 test vectors                               3   4 - edge case for shared secret.
 ...                ECDH P521 test vectors                               4   5 - edge case for shared secret.
[OK]                ECDH P521 test vectors                               4   5 - edge case for shared secret.
 ...                ECDH P521 test vectors                               5   6 - edge case for shared secret.
[OK]                ECDH P521 test vectors                               5   6 - edge case for shared secret.
 ...                ECDH P521 test vectors                               6   7 - edge case for shared secret.
[OK]                ECDH P521 test vectors                               6   7 - edge case for shared secret.
 ...                ECDH P521 test vectors                               7   8 - edge case for shared secret.
[OK]                ECDH P521 test vectors                               7   8 - edge case for shared secret.
 ...                ECDH P521 test vectors                               8   9 - edge case for shared secret.
[OK]                ECDH P521 test vectors                               8   9 - edge case for shared secret.
 ...                ECDH P521 test vectors                               9   10 - edge case for shared secret.
[OK]                ECDH P521 test vectors                               9   10 - edge case for shared secret.
 ...                ECDH P521 test vectors                              10   11 - edge case for shared secret.
[OK]                ECDH P521 test vectors                              10   11 - edge case for shared secret.
 ...                ECDH P521 test vectors                              11   12 - edge case for shared secret.
[OK]                ECDH P521 test vectors                              11   12 - edge case for shared secret.
 ...                ECDH P521 test vectors                              12   13 - edge case for shared secret.
[OK]                ECDH P521 test vectors                              12   13 - edge case for shared secret.
 ...                ECDH P521 test vectors                              13   14 - edge case for shared secret.
[OK]                ECDH P521 test vectors                              13   14 - edge case for shared secret.
 ...                ECDH P521 test vectors                              14   15 - edge case for shared secret.
[OK]                ECDH P521 test vectors                              14   15 - edge case for shared secret.
 ...                ECDH P521 test vectors                              15   16 - edge case for shared secret.
[OK]                ECDH P521 test vectors                              15   16 - edge case for shared secret.
 ...                ECDH P521 test vectors                              16   17 - edge case for shared secret.
[OK]                ECDH P521 test vectors                              16   17 - edge case for shared secret.
 ...                ECDH P521 test vectors                              17   18 - edge case for shared secret.
[OK]                ECDH P521 test vectors                              17   18 - edge case for shared secret.
 ...                ECDH P521 test vectors                              18   19 - edge case for shared secret.
[OK]                ECDH P521 test vectors                              18   19 - edge case for shared secret.
 ...                ECDH P521 test vectors                              19   20 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              19   20 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              20   21 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              20   21 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              21   22 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              21   22 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              22   23 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              22   23 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              23   24 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              23   24 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              24   25 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              24   25 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              25   26 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              25   26 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              26   27 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              26   27 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              27   28 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              27   28 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              28   29 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              28   29 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              29   30 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              29   30 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              30   31 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              30   31 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              31   32 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              31   32 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              32   33 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              32   33 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              33   34 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              33   34 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              34   35 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              34   35 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              35   36 - edge cases for ephemeral key.
[OK]                ECDH P521 test vectors                              35   36 - edge cases for ephemeral key.
 ...                ECDH P521 test vectors                              36   37 - edge case for Jacobian and projective coordinates.
[OK]                ECDH P521 test vectors                              36   37 - edge case for Jacobian and projective coordinates.
 ...                ECDH P521 test vectors                              37   38 - edge case for Jacobian and projective coordinates.
[OK]                ECDH P521 test vectors                              37   38 - edge case for Jacobian and projective coordinates.
 ...                ECDH P521 test vectors                              38   39 - edge case for Jacobian and projective coordinates.
[OK]                ECDH P521 test vectors                              38   39 - edge case for Jacobian and projective coordinates.
 ...                ECDH P521 test vectors                              39   40 - edge case for Jacobian and projective coordinates.
[OK]                ECDH P521 test vectors                              39   40 - edge case for Jacobian and projective coordinates.
 ...                ECDH P521 test vectors                              40   41 - edge case for Jacobian and projective coordinates.
[OK]                ECDH P521 test vectors                              40   41 - edge case for Jacobian and projective coordinates.
 ...                ECDH P521 test vectors                              41   42 - edge case for Jacobian and projective coordinates.
[OK]                ECDH P521 test vectors                              41   42 - edge case for Jacobian and projective coordinates.
 ...                ECDH P521 test vectors                              42   43 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              42   43 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              43   44 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              43   44 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              44   45 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              44   45 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              45   46 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              45   46 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              46   47 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              46   47 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              47   48 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              47   48 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              48   49 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              48   49 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              49   50 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              49   50 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              50   51 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              50   51 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              51   52 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              51   52 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              52   53 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              52   53 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              53   54 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              53   54 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              54   55 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              54   55 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              55   56 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              55   56 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              56   57 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              56   57 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              57   58 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              57   58 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              58   59 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              58   59 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              59   60 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              59   60 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              60   61 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              60   61 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              61   62 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              61   62 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              62   63 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              62   63 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              63   64 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              63   64 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              64   65 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              64   65 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              65   66 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              65   66 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              66   67 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              66   67 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              67   68 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              67   68 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              68   69 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              68   69 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              69   70 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              69   70 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              70   71 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              70   71 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              71   72 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              71   72 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              72   73 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              72   73 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              73   74 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              73   74 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              74   75 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              74   75 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              75   76 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              75   76 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              76   77 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              76   77 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              77   78 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              77   78 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              78   79 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              78   79 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              79   80 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              79   80 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              80   81 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              80   81 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              81   82 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              81   82 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              82   83 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              82   83 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              83   84 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              83   84 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              84   85 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              84   85 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              85   86 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              85   86 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              86   87 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              86   87 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              87   88 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              87   88 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              88   89 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              88   89 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              89   90 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              89   90 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              90   91 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              90   91 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              91   92 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH P521 test vectors                              91   92 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH P521 test vectors                              92   93 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                              92   93 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                              93   94 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                              93   94 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                              94   95 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                              94   95 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                              95   96 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                              95   96 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                              96   97 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                              96   97 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                              97   98 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                              97   98 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                              98   99 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                              98   99 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                              99   100 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                              99   100 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             100   101 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             100   101 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             101   102 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             101   102 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             102   103 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             102   103 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             103   104 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             103   104 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             104   105 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P521 test vectors                             104   105 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P521 test vectors                             105   106 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P521 test vectors                             105   106 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P521 test vectors                             106   107 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P521 test vectors                             106   107 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P521 test vectors                             107   108 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P521 test vectors                             107   108 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P521 test vectors                             108   109 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P521 test vectors                             108   109 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P521 test vectors                             109   110 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P521 test vectors                             109   110 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P521 test vectors                             110   111 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P521 test vectors                             110   111 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P521 test vectors                             111   112 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P521 test vectors                             111   112 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P521 test vectors                             112   113 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P521 test vectors                             112   113 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P521 test vectors                             113   114 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH P521 test vectors                             113   114 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH P521 test vectors                             114   115 - point with coordinate x = 0.
[OK]                ECDH P521 test vectors                             114   115 - point with coordinate x = 0.
 ...                ECDH P521 test vectors                             115   116 - point with coordinate x = 0.
[OK]                ECDH P521 test vectors                             115   116 - point with coordinate x = 0.
 ...                ECDH P521 test vectors                             116   117 - point with coordinate x = 0.
[OK]                ECDH P521 test vectors                             116   117 - point with coordinate x = 0.
 ...                ECDH P521 test vectors                             117   118 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             117   118 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             118   119 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             118   119 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             119   120 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             119   120 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             120   121 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             120   121 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             121   122 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             121   122 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             122   123 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             122   123 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             123   124 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             123   124 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             124   125 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             124   125 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             125   126 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             125   126 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             126   127 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             126   127 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             127   128 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             127   128 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             128   129 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             128   129 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             129   130 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             129   130 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             130   131 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             130   131 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             131   132 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             131   132 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             132   133 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             132   133 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             133   134 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             133   134 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             134   135 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             134   135 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             135   136 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             135   136 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             136   137 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             136   137 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             137   138 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             137   138 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             138   139 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             138   139 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             139   140 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             139   140 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             140   141 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             140   141 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             141   142 - point with coordinate x = 0 in left to right addition chain.
[OK]                ECDH P521 test vectors                             141   142 - point with coordinate x = 0 in left to right addition chain.
 ...                ECDH P521 test vectors                             142   143 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             142   143 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             143   144 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             143   144 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             144   145 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             144   145 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             145   146 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             145   146 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             146   147 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             146   147 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             147   148 - point with coordinate x = 0 in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             147   148 - point with coordinate x = 0 in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             148   149 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P521 test vectors                             148   149 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P521 test vectors                             149   150 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P521 test vectors                             149   150 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P521 test vectors                             150   151 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P521 test vectors                             150   151 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P521 test vectors                             151   152 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P521 test vectors                             151   152 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P521 test vectors                             152   153 - point with coordinate x = 0 in right to left addition chain.
[OK]                ECDH P521 test vectors                             152   153 - point with coordinate x = 0 in right to left addition chain.
 ...                ECDH P521 test vectors                             153   154 - point with coordinate y = 1.
[OK]                ECDH P521 test vectors                             153   154 - point with coordinate y = 1.
 ...                ECDH P521 test vectors                             154   155 - point with coordinate y = 1.
[OK]                ECDH P521 test vectors                             154   155 - point with coordinate y = 1.
 ...                ECDH P521 test vectors                             155   156 - point with coordinate y = 1.
[OK]                ECDH P521 test vectors                             155   156 - point with coordinate y = 1.
 ...                ECDH P521 test vectors                             156   157 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             156   157 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             157   158 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             157   158 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             158   159 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             158   159 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             159   160 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             159   160 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             160   161 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             160   161 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             161   162 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             161   162 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             162   163 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             162   163 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             163   164 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             163   164 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             164   165 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             164   165 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             165   166 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             165   166 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             166   167 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             166   167 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             167   168 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             167   168 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             168   169 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             168   169 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             169   170 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             169   170 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             170   171 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             170   171 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             171   172 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             171   172 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             172   173 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             172   173 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             173   174 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             173   174 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             174   175 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             174   175 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             175   176 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             175   176 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             176   177 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             176   177 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             177   178 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             177   178 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             178   179 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             178   179 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             179   180 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             179   180 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             180   181 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH P521 test vectors                             180   181 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH P521 test vectors                             181   182 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             181   182 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             182   183 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             182   183 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             183   184 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             183   184 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             184   185 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             184   185 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             185   186 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             185   186 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             186   187 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH P521 test vectors                             186   187 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH P521 test vectors                             187   188 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P521 test vectors                             187   188 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P521 test vectors                             188   189 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P521 test vectors                             188   189 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P521 test vectors                             189   190 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P521 test vectors                             189   190 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P521 test vectors                             190   191 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P521 test vectors                             190   191 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P521 test vectors                             191   192 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH P521 test vectors                             191   192 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH P521 test vectors                             192   193 - edge case private key.
[OK]                ECDH P521 test vectors                             192   193 - edge case private key.
 ...                ECDH P521 test vectors                             193   194 - edge case private key.
[OK]                ECDH P521 test vectors                             193   194 - edge case private key.
 ...                ECDH P521 test vectors                             194   195 - edge case private key.
[OK]                ECDH P521 test vectors                             194   195 - edge case private key.
 ...                ECDH P521 test vectors                             195   196 - edge case private key.
[OK]                ECDH P521 test vectors                             195   196 - edge case private key.
 ...                ECDH P521 test vectors                             196   197 - edge case private key.
[OK]                ECDH P521 test vectors                             196   197 - edge case private key.
 ...                ECDH P521 test vectors                             197   198 - edge case private key.
[OK]                ECDH P521 test vectors                             197   198 - edge case private key.
 ...                ECDH P521 test vectors                             198   199 - edge case private key.
[OK]                ECDH P521 test vectors                             198   199 - edge case private key.
 ...                ECDH P521 test vectors                             199   200 - edge case private key.
[OK]                ECDH P521 test vectors                             199   200 - edge case private key.
 ...                ECDH P521 test vectors                             200   201 - edge case private key.
[OK]                ECDH P521 test vectors                             200   201 - edge case private key.
 ...                ECDH P521 test vectors                             201   202 - edge case private key.
[OK]                ECDH P521 test vectors                             201   202 - edge case private key.
 ...                ECDH P521 test vectors                             202   203 - edge case private key.
[OK]                ECDH P521 test vectors                             202   203 - edge case private key.
 ...                ECDH P521 test vectors                             203   204 - edge case private key.
[OK]                ECDH P521 test vectors                             203   204 - edge case private key.
 ...                ECDH P521 test vectors                             204   205 - edge case private key.
[OK]                ECDH P521 test vectors                             204   205 - edge case private key.
 ...                ECDH P521 test vectors                             205   206 - edge case private key.
[OK]                ECDH P521 test vectors                             205   206 - edge case private key.
 ...                ECDH P521 test vectors                             206   207 - edge case private key.
[OK]                ECDH P521 test vectors                             206   207 - edge case private key.
 ...                ECDH P521 test vectors                             207   208 - edge case private key.
[OK]                ECDH P521 test vectors                             207   208 - edge case private key.
 ...                ECDH P521 test vectors                             208   209 - CVE-2017-10176: Issue with elliptic curve addition.
[OK]                ECDH P521 test vectors                             208   209 - CVE-2017-10176: Issue with elliptic curve addition.
 ...                ECDH P521 test vectors                             209   210 - point is not on curve.
[OK]                ECDH P521 test vectors                             209   210 - point is not on curve.
 ...                ECDH P521 test vectors                             210   211 - point is not on curve.
[OK]                ECDH P521 test vectors                             210   211 - point is not on curve.
 ...                ECDH P521 test vectors                             211   212 - point is not on curve.
[OK]                ECDH P521 test vectors                             211   212 - point is not on curve.
 ...                ECDH P521 test vectors                             212   213 - point is not on curve.
[OK]                ECDH P521 test vectors                             212   213 - point is not on curve.
 ...                ECDH P521 test vectors                             213   214 - point is not on curve.
[OK]                ECDH P521 test vectors                             213   214 - point is not on curve.
 ...                ECDH P521 test vectors                             214   215 - point is not on curve.
[OK]                ECDH P521 test vectors                             214   215 - point is not on curve.
 ...                ECDH P521 test vectors                             215   216 - point is not on curve.
[OK]                ECDH P521 test vectors                             215   216 - point is not on curve.
 ...                ECDH P521 test vectors                             216   217 - point is not on curve.
[OK]                ECDH P521 test vectors                             216   217 - point is not on curve.
 ...                ECDH P521 test vectors                             217   218 - point is not on curve.
[OK]                ECDH P521 test vectors                             217   218 - point is not on curve.
 ...                ECDH P521 test vectors                             218   219 - point is not on curve.
[OK]                ECDH P521 test vectors                             218   219 - point is not on curve.
 ...                ECDH P521 test vectors                             219   220 - point is not on curve.
[OK]                ECDH P521 test vectors                             219   220 - point is not on curve.
 ...                ECDH P521 test vectors                             220   221 - point is not on curve.
[OK]                ECDH P521 test vectors                             220   221 - point is not on curve.
 ...                ECDH P521 test vectors                             221   222 - point is not on curve.
[OK]                ECDH P521 test vectors                             221   222 - point is not on curve.
 ...                ECDH P521 test vectors                             222   223 - point is not on curve.
[OK]                ECDH P521 test vectors                             222   223 - point is not on curve.
 ...                ECDH P521 test vectors                             223   224 - point is not on curve.
[OK]                ECDH P521 test vectors                             223   224 - point is not on curve.
 ...                ECDH P521 test vectors                             224   225 - point is not on curve.
[OK]                ECDH P521 test vectors                             224   225 - point is not on curve.
 ...                ECDH P521 test vectors                             225   226 - .
[OK]                ECDH P521 test vectors                             225   226 - .
 ...                ECDH P521 test vectors                             226   227 - public point not on curve.
[OK]                ECDH P521 test vectors                             226   227 - public point not on curve.
 ...                ECDH P521 test vectors                             227   228 - public point = (0,0).
[OK]                ECDH P521 test vectors                             227   228 - public point = (0,0).
 ...                ECDH P521 test vectors                             228   241 - using secp224r1.
[OK]                ECDH P521 test vectors                             228   241 - using secp224r1.
 ...                ECDH P521 test vectors                             229   242 - using secp256r1.
[OK]                ECDH P521 test vectors                             229   242 - using secp256r1.
 ...                ECDH P521 test vectors                             230   243 - using secp256k1.
[OK]                ECDH P521 test vectors                             230   243 - using secp256k1.
 ...                ECDH P521 test vectors                             231   246 - Public key uses wrong curve: secp224r1.
[OK]                ECDH P521 test vectors                             231   246 - Public key uses wrong curve: secp224r1.
 ...                ECDH P521 test vectors                             232   247 - Public key uses wrong curve: secp256r1.
[OK]                ECDH P521 test vectors                             232   247 - Public key uses wrong curve: secp256r1.
 ...                ECDH P521 test vectors                             233   248 - Public key uses wrong curve: secp384r1.
[OK]                ECDH P521 test vectors                             233   248 - Public key uses wrong curve: secp384r1.
 ...                ECDH P521 test vectors                             234   249 - Public key uses wrong curve: secp256k1.
[OK]                ECDH P521 test vectors                             234   249 - Public key uses wrong curve: secp256k1.
 ...                ECDH P521 test vectors                             235   250 - Public key uses wrong curve: secp224k1.
[OK]                ECDH P521 test vectors                             235   250 - Public key uses wrong curve: secp224k1.
 ...                ECDH P521 test vectors                             236   251 - Public key uses wrong curve: brainpoolP224r1.
[OK]                ECDH P521 test vectors                             236   251 - Public key uses wrong curve: brainpoolP224r1.
 ...                ECDH P521 test vectors                             237   252 - Public key uses wrong curve: brainpoolP256r1.
[OK]                ECDH P521 test vectors                             237   252 - Public key uses wrong curve: brainpoolP256r1.
 ...                ECDH P521 test vectors                             238   253 - Public key uses wrong curve: brainpoolP320r1.
[OK]                ECDH P521 test vectors                             238   253 - Public key uses wrong curve: brainpoolP320r1.
 ...                ECDH P521 test vectors                             239   254 - Public key uses wrong curve: brainpoolP384r1.
[OK]                ECDH P521 test vectors                             239   254 - Public key uses wrong curve: brainpoolP384r1.
 ...                ECDH P521 test vectors                             240   255 - Public key uses wrong curve: brainpoolP512r1.
[OK]                ECDH P521 test vectors                             240   255 - Public key uses wrong curve: brainpoolP512r1.
 ...                ECDH P521 test vectors                             241   256 - Public key uses wrong curve: brainpoolP224t1.
[OK]                ECDH P521 test vectors                             241   256 - Public key uses wrong curve: brainpoolP224t1.
 ...                ECDH P521 test vectors                             242   257 - Public key uses wrong curve: brainpoolP256t1.
[OK]                ECDH P521 test vectors                             242   257 - Public key uses wrong curve: brainpoolP256t1.
 ...                ECDH P521 test vectors                             243   258 - Public key uses wrong curve: brainpoolP320t1.
[OK]                ECDH P521 test vectors                             243   258 - Public key uses wrong curve: brainpoolP320t1.
 ...                ECDH P521 test vectors                             244   259 - Public key uses wrong curve: brainpoolP384t1.
[OK]                ECDH P521 test vectors                             244   259 - Public key uses wrong curve: brainpoolP384t1.
 ...                ECDH P521 test vectors                             245   260 - Public key uses wrong curve: brainpoolP512t1.
[OK]                ECDH P521 test vectors                             245   260 - Public key uses wrong curve: brainpoolP512t1.
 ...                ECDH P521 test vectors                             246   261 - invalid public key.
[OK]                ECDH P521 test vectors                             246   261 - invalid public key.
 ...                ECDH P521 test vectors                             247   262 - public key is a low order point on twist.
[OK]                ECDH P521 test vectors                             247   262 - public key is a low order point on twist.
 ...                ECDH P521 test vectors                             248   263 - public key is a low order point on twist.
[OK]                ECDH P521 test vectors                             248   263 - public key is a low order point on twist.
 ...                ECDH P521 test vectors                             249   264 - public key is a low order point on twist.
[OK]                ECDH P521 test vectors                             249   264 - public key is a low order point on twist.
 ...                ECDH P521 test vectors                             250   265 - public key is a low order point on twist.
[OK]                ECDH P521 test vectors                             250   265 - public key is a low order point on twist.
 ...                ECDH P521 test vectors                             251   266 - public key is a low order point on twist.
[OK]                ECDH P521 test vectors                             251   266 - public key is a low order point on twist.
 ...                ECDH P521 test vectors                             252   267 - public key is a low order point on twist.
[OK]                ECDH P521 test vectors                             252   267 - public key is a low order point on twist.
 ...                ECDH P521 test vectors                             253   268 - public key is a low order point on twist.
[OK]                ECDH P521 test vectors                             253   268 - public key is a low order point on twist.
 ...                ECDH P521 test vectors                             254   269 - public key is a low order point on twist.
[OK]                ECDH P521 test vectors                             254   269 - public key is a low order point on twist.
 ...                ECDH P521 test vectors                             255   270 - public key is a low order point on twist.
[OK]                ECDH P521 test vectors                             255   270 - public key is a low order point on twist.
 ...                ECDH P521 test vectors                             256   271 - public key is a low order point on twist.
[OK]                ECDH P521 test vectors                             256   271 - public key is a low order point on twist.
 ...                ECDSA P521 test vectors (SHA512)                     0   1 - signature malleability.
[OK]                ECDSA P521 test vectors (SHA512)                     0   1 - signature malleability.
 ...                ECDSA P521 test vectors (SHA512)                     1   2 - valid.
[OK]                ECDSA P521 test vectors (SHA512)                     1   2 - valid.
 ...                ECDSA P521 test vectors (SHA512)                     2   3 - length of sequence contains leading 0.
[OK]                ECDSA P521 test vectors (SHA512)                     2   3 - length of sequence contains leading 0.
 ...                ECDSA P521 test vectors (SHA512)                     3   4 - wrong length of sequence.
[OK]                ECDSA P521 test vectors (SHA512)                     3   4 - wrong length of sequence.
 ...                ECDSA P521 test vectors (SHA512)                     4   5 - wrong length of sequence.
[OK]                ECDSA P521 test vectors (SHA512)                     4   5 - wrong length of sequence.
 ...                ECDSA P521 test vectors (SHA512)                     5   6 - uint32 overflow in length of sequence.
[OK]                ECDSA P521 test vectors (SHA512)                     5   6 - uint32 overflow in length of sequence.
 ...                ECDSA P521 test vectors (SHA512)                     6   7 - uint64 overflow in length of sequence.
[OK]                ECDSA P521 test vectors (SHA512)                     6   7 - uint64 overflow in length of sequence.
 ...                ECDSA P521 test vectors (SHA512)                     7   8 - length of sequence = 2**31 - 1.
[OK]                ECDSA P521 test vectors (SHA512)                     7   8 - length of sequence = 2**31 - 1.
 ...                ECDSA P521 test vectors (SHA512)                     8   9 - length of sequence = 2**32 - 1.
[OK]                ECDSA P521 test vectors (SHA512)                     8   9 - length of sequence = 2**32 - 1.
 ...                ECDSA P521 test vectors (SHA512)                     9   10 - length of sequence = 2**40 - 1.
[OK]                ECDSA P521 test vectors (SHA512)                     9   10 - length of sequence = 2**40 - 1.
 ...                ECDSA P521 test vectors (SHA512)                    10   11 - length of sequence = 2**64 - 1.
[OK]                ECDSA P521 test vectors (SHA512)                    10   11 - length of sequence = 2**64 - 1.
 ...                ECDSA P521 test vectors (SHA512)                    11   12 - incorrect length of sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    11   12 - incorrect length of sequence.
 ...                ECDSA P521 test vectors (SHA512)                    12   13 - indefinite length without termination.
[OK]                ECDSA P521 test vectors (SHA512)                    12   13 - indefinite length without termination.
 ...                ECDSA P521 test vectors (SHA512)                    13   14 - indefinite length without termination.
[OK]                ECDSA P521 test vectors (SHA512)                    13   14 - indefinite length without termination.
 ...                ECDSA P521 test vectors (SHA512)                    14   15 - indefinite length without termination.
[OK]                ECDSA P521 test vectors (SHA512)                    14   15 - indefinite length without termination.
 ...                ECDSA P521 test vectors (SHA512)                    15   16 - removing sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    15   16 - removing sequence.
 ...                ECDSA P521 test vectors (SHA512)                    16   17 - lonely sequence tag.
[OK]                ECDSA P521 test vectors (SHA512)                    16   17 - lonely sequence tag.
 ...                ECDSA P521 test vectors (SHA512)                    17   18 - appending 0's to sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    17   18 - appending 0's to sequence.
 ...                ECDSA P521 test vectors (SHA512)                    18   19 - prepending 0's to sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    18   19 - prepending 0's to sequence.
 ...                ECDSA P521 test vectors (SHA512)                    19   20 - appending unused 0's to sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    19   20 - appending unused 0's to sequence.
 ...                ECDSA P521 test vectors (SHA512)                    20   21 - appending null value to sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    20   21 - appending null value to sequence.
 ...                ECDSA P521 test vectors (SHA512)                    21   22 - including garbage.
[OK]                ECDSA P521 test vectors (SHA512)                    21   22 - including garbage.
 ...                ECDSA P521 test vectors (SHA512)                    22   23 - including garbage.
[OK]                ECDSA P521 test vectors (SHA512)                    22   23 - including garbage.
 ...                ECDSA P521 test vectors (SHA512)                    23   24 - including garbage.
[OK]                ECDSA P521 test vectors (SHA512)                    23   24 - including garbage.
 ...                ECDSA P521 test vectors (SHA512)                    24   25 - including garbage.
[OK]                ECDSA P521 test vectors (SHA512)                    24   25 - including garbage.
 ...                ECDSA P521 test vectors (SHA512)                    25   26 - including garbage.
[OK]                ECDSA P521 test vectors (SHA512)                    25   26 - including garbage.
 ...                ECDSA P521 test vectors (SHA512)                    26   27 - including garbage.
[OK]                ECDSA P521 test vectors (SHA512)                    26   27 - including garbage.
 ...                ECDSA P521 test vectors (SHA512)                    27   28 - including garbage.
[OK]                ECDSA P521 test vectors (SHA512)                    27   28 - including garbage.
 ...                ECDSA P521 test vectors (SHA512)                    28   29 - including garbage.
[OK]                ECDSA P521 test vectors (SHA512)                    28   29 - including garbage.
 ...                ECDSA P521 test vectors (SHA512)                    29   30 - including garbage.
[OK]                ECDSA P521 test vectors (SHA512)                    29   30 - including garbage.
 ...                ECDSA P521 test vectors (SHA512)                    30   31 - including undefined tags.
[OK]                ECDSA P521 test vectors (SHA512)                    30   31 - including undefined tags.
 ...                ECDSA P521 test vectors (SHA512)                    31   32 - including undefined tags.
[OK]                ECDSA P521 test vectors (SHA512)                    31   32 - including undefined tags.
 ...                ECDSA P521 test vectors (SHA512)                    32   33 - including undefined tags.
[OK]                ECDSA P521 test vectors (SHA512)                    32   33 - including undefined tags.
 ...                ECDSA P521 test vectors (SHA512)                    33   34 - including undefined tags.
[OK]                ECDSA P521 test vectors (SHA512)                    33   34 - including undefined tags.
 ...                ECDSA P521 test vectors (SHA512)                    34   35 - including undefined tags.
[OK]                ECDSA P521 test vectors (SHA512)                    34   35 - including undefined tags.
 ...                ECDSA P521 test vectors (SHA512)                    35   36 - including undefined tags.
[OK]                ECDSA P521 test vectors (SHA512)                    35   36 - including undefined tags.
 ...                ECDSA P521 test vectors (SHA512)                    36   37 - truncated length of sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    36   37 - truncated length of sequence.
 ...                ECDSA P521 test vectors (SHA512)                    37   38 - using composition with indefinite length.
[OK]                ECDSA P521 test vectors (SHA512)                    37   38 - using composition with indefinite length.
 ...                ECDSA P521 test vectors (SHA512)                    38   39 - using composition with indefinite length.
[OK]                ECDSA P521 test vectors (SHA512)                    38   39 - using composition with indefinite length.
 ...                ECDSA P521 test vectors (SHA512)                    39   40 - using composition with indefinite length.
[OK]                ECDSA P521 test vectors (SHA512)                    39   40 - using composition with indefinite length.
 ...                ECDSA P521 test vectors (SHA512)                    40   41 - using composition with wrong tag.
[OK]                ECDSA P521 test vectors (SHA512)                    40   41 - using composition with wrong tag.
 ...                ECDSA P521 test vectors (SHA512)                    41   42 - using composition with wrong tag.
[OK]                ECDSA P521 test vectors (SHA512)                    41   42 - using composition with wrong tag.
 ...                ECDSA P521 test vectors (SHA512)                    42   43 - using composition with wrong tag.
[OK]                ECDSA P521 test vectors (SHA512)                    42   43 - using composition with wrong tag.
 ...                ECDSA P521 test vectors (SHA512)                    43   44 - Replacing sequence with NULL.
[OK]                ECDSA P521 test vectors (SHA512)                    43   44 - Replacing sequence with NULL.
 ...                ECDSA P521 test vectors (SHA512)                    44   45 - changing tag value of sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    44   45 - changing tag value of sequence.
 ...                ECDSA P521 test vectors (SHA512)                    45   46 - changing tag value of sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    45   46 - changing tag value of sequence.
 ...                ECDSA P521 test vectors (SHA512)                    46   47 - changing tag value of sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    46   47 - changing tag value of sequence.
 ...                ECDSA P521 test vectors (SHA512)                    47   48 - changing tag value of sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    47   48 - changing tag value of sequence.
 ...                ECDSA P521 test vectors (SHA512)                    48   49 - changing tag value of sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    48   49 - changing tag value of sequence.
 ...                ECDSA P521 test vectors (SHA512)                    49   50 - dropping value of sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    49   50 - dropping value of sequence.
 ...                ECDSA P521 test vectors (SHA512)                    50   51 - using composition for sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    50   51 - using composition for sequence.
 ...                ECDSA P521 test vectors (SHA512)                    51   52 - truncated sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    51   52 - truncated sequence.
 ...                ECDSA P521 test vectors (SHA512)                    52   53 - truncated sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    52   53 - truncated sequence.
 ...                ECDSA P521 test vectors (SHA512)                    53   54 - indefinite length.
[OK]                ECDSA P521 test vectors (SHA512)                    53   54 - indefinite length.
 ...                ECDSA P521 test vectors (SHA512)                    54   55 - indefinite length with truncated delimiter.
[OK]                ECDSA P521 test vectors (SHA512)                    54   55 - indefinite length with truncated delimiter.
 ...                ECDSA P521 test vectors (SHA512)                    55   56 - indefinite length with additional element.
[OK]                ECDSA P521 test vectors (SHA512)                    55   56 - indefinite length with additional element.
 ...                ECDSA P521 test vectors (SHA512)                    56   57 - indefinite length with truncated element.
[OK]                ECDSA P521 test vectors (SHA512)                    56   57 - indefinite length with truncated element.
 ...                ECDSA P521 test vectors (SHA512)                    57   58 - indefinite length with garbage.
[OK]                ECDSA P521 test vectors (SHA512)                    57   58 - indefinite length with garbage.
 ...                ECDSA P521 test vectors (SHA512)                    58   59 - indefinite length with nonempty EOC.
[OK]                ECDSA P521 test vectors (SHA512)                    58   59 - indefinite length with nonempty EOC.
 ...                ECDSA P521 test vectors (SHA512)                    59   60 - prepend empty sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    59   60 - prepend empty sequence.
 ...                ECDSA P521 test vectors (SHA512)                    60   61 - append empty sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    60   61 - append empty sequence.
 ...                ECDSA P521 test vectors (SHA512)                    61   62 - append garbage with high tag number.
[OK]                ECDSA P521 test vectors (SHA512)                    61   62 - append garbage with high tag number.
 ...                ECDSA P521 test vectors (SHA512)                    62   63 - sequence of sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    62   63 - sequence of sequence.
 ...                ECDSA P521 test vectors (SHA512)                    63   64 - truncated sequence: removed last 1 elements.
[OK]                ECDSA P521 test vectors (SHA512)                    63   64 - truncated sequence: removed last 1 elements.
 ...                ECDSA P521 test vectors (SHA512)                    64   65 - repeating element in sequence.
[OK]                ECDSA P521 test vectors (SHA512)                    64   65 - repeating element in sequence.
 ...                ECDSA P521 test vectors (SHA512)                    65   66 - long form encoding of length of integer.
[OK]                ECDSA P521 test vectors (SHA512)                    65   66 - long form encoding of length of integer.
 ...                ECDSA P521 test vectors (SHA512)                    66   67 - long form encoding of length of integer.
[OK]                ECDSA P521 test vectors (SHA512)                    66   67 - long form encoding of length of integer.
 ...                ECDSA P521 test vectors (SHA512)                    67   68 - length of integer contains leading 0.
[OK]                ECDSA P521 test vectors (SHA512)                    67   68 - length of integer contains leading 0.
 ...                ECDSA P521 test vectors (SHA512)                    68   69 - length of integer contains leading 0.
[OK]                ECDSA P521 test vectors (SHA512)                    68   69 - length of integer contains leading 0.
 ...                ECDSA P521 test vectors (SHA512)                    69   70 - wrong length of integer.
[OK]                ECDSA P521 test vectors (SHA512)                    69   70 - wrong length of integer.
 ...                ECDSA P521 test vectors (SHA512)                    70   71 - wrong length of integer.
[OK]                ECDSA P521 test vectors (SHA512)                    70   71 - wrong length of integer.
 ...                ECDSA P521 test vectors (SHA512)                    71   72 - wrong length of integer.
[OK]                ECDSA P521 test vectors (SHA512)                    71   72 - wrong length of integer.
 ...                ECDSA P521 test vectors (SHA512)                    72   73 - wrong length of integer.
[OK]                ECDSA P521 test vectors (SHA512)                    72   73 - wrong length of integer.
 ...                ECDSA P521 test vectors (SHA512)                    73   74 - uint32 overflow in length of integer.
[OK]                ECDSA P521 test vectors (SHA512)                    73   74 - uint32 overflow in length of integer.
 ...                ECDSA P521 test vectors (SHA512)                    74   75 - uint32 overflow in length of integer.
[OK]                ECDSA P521 test vectors (SHA512)                    74   75 - uint32 overflow in length of integer.
 ...                ECDSA P521 test vectors (SHA512)                    75   76 - uint64 overflow in length of integer.
[OK]                ECDSA P521 test vectors (SHA512)                    75   76 - uint64 overflow in length of integer.
 ...                ECDSA P521 test vectors (SHA512)                    76   77 - uint64 overflow in length of integer.
[OK]                ECDSA P521 test vectors (SHA512)                    76   77 - uint64 overflow in length of integer.
 ...                ECDSA P521 test vectors (SHA512)                    77   78 - length of integer = 2**31 - 1.
[OK]                ECDSA P521 test vectors (SHA512)                    77   78 - length of integer = 2**31 - 1.
 ...                ECDSA P521 test vectors (SHA512)                    78   79 - length of integer = 2**31 - 1.
[OK]                ECDSA P521 test vectors (SHA512)                    78   79 - length of integer = 2**31 - 1.
 ...                ECDSA P521 test vectors (SHA512)                    79   80 - length of integer = 2**32 - 1.
[OK]                ECDSA P521 test vectors (SHA512)                    79   80 - length of integer = 2**32 - 1.
 ...                ECDSA P521 test vectors (SHA512)                    80   81 - length of integer = 2**32 - 1.
[OK]                ECDSA P521 test vectors (SHA512)                    80   81 - length of integer = 2**32 - 1.
 ...                ECDSA P521 test vectors (SHA512)                    81   82 - length of integer = 2**40 - 1.
[OK]                ECDSA P521 test vectors (SHA512)                    81   82 - length of integer = 2**40 - 1.
 ...                ECDSA P521 test vectors (SHA512)                    82   83 - length of integer = 2**40 - 1.
[OK]                ECDSA P521 test vectors (SHA512)                    82   83 - length of integer = 2**40 - 1.
 ...                ECDSA P521 test vectors (SHA512)                    83   84 - length of integer = 2**64 - 1.
[OK]                ECDSA P521 test vectors (SHA512)                    83   84 - length of integer = 2**64 - 1.
 ...                ECDSA P521 test vectors (SHA512)                    84   85 - length of integer = 2**64 - 1.
[OK]                ECDSA P521 test vectors (SHA512)                    84   85 - length of integer = 2**64 - 1.
 ...                ECDSA P521 test vectors (SHA512)                    85   86 - incorrect length of integer.
[OK]                ECDSA P521 test vectors (SHA512)                    85   86 - incorrect length of integer.
 ...                ECDSA P521 test vectors (SHA512)                    86   87 - incorrect length of integer.
[OK]                ECDSA P521 test vectors (SHA512)                    86   87 - incorrect length of integer.
 ...                ECDSA P521 test vectors (SHA512)                    87   88 - removing integer.
[OK]                ECDSA P521 test vectors (SHA512)                    87   88 - removing integer.
 ...                ECDSA P521 test vectors (SHA512)                    88   89 - lonely integer tag.
[OK]                ECDSA P521 test vectors (SHA512)                    88   89 - lonely integer tag.
 ...                ECDSA P521 test vectors (SHA512)                    89   90 - lonely integer tag.
[OK]                ECDSA P521 test vectors (SHA512)                    89   90 - lonely integer tag.
 ...                ECDSA P521 test vectors (SHA512)                    90   91 - appending 0's to integer.
[OK]                ECDSA P521 test vectors (SHA512)                    90   91 - appending 0's to integer.
 ...                ECDSA P521 test vectors (SHA512)                    91   92 - appending 0's to integer.
[OK]                ECDSA P521 test vectors (SHA512)                    91   92 - appending 0's to integer.
 ...                ECDSA P521 test vectors (SHA512)                    92   93 - prepending 0's to integer.
[OK]                ECDSA P521 test vectors (SHA512)                    92   93 - prepending 0's to integer.
 ...                ECDSA P521 test vectors (SHA512)                    93   94 - prepending 0's to integer.
[OK]                ECDSA P521 test vectors (SHA512)                    93   94 - prepending 0's to integer.
 ...                ECDSA P521 test vectors (SHA512)                    94   95 - appending unused 0's to integer.
[OK]                ECDSA P521 test vectors (SHA512)                    94   95 - appending unused 0's to integer.
 ...                ECDSA P521 test vectors (SHA512)                    95   96 - appending null value to integer.
[OK]                ECDSA P521 test vectors (SHA512)                    95   96 - appending null value to integer.
 ...                ECDSA P521 test vectors (SHA512)                    96   97 - appending null value to integer.
[OK]                ECDSA P521 test vectors (SHA512)                    96   97 - appending null value to integer.
 ...                ECDSA P521 test vectors (SHA512)                    97   98 - truncated length of integer.
[OK]                ECDSA P521 test vectors (SHA512)                    97   98 - truncated length of integer.
 ...                ECDSA P521 test vectors (SHA512)                    98   99 - truncated length of integer.
[OK]                ECDSA P521 test vectors (SHA512)                    98   99 - truncated length of integer.
 ...                ECDSA P521 test vectors (SHA512)                    99   100 - Replacing integer with NULL.
[OK]                ECDSA P521 test vectors (SHA512)                    99   100 - Replacing integer with NULL.
 ...                ECDSA P521 test vectors (SHA512)                   100   101 - Replacing integer with NULL.
[OK]                ECDSA P521 test vectors (SHA512)                   100   101 - Replacing integer with NULL.
 ...                ECDSA P521 test vectors (SHA512)                   101   102 - changing tag value of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   101   102 - changing tag value of integer.
 ...                ECDSA P521 test vectors (SHA512)                   102   103 - changing tag value of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   102   103 - changing tag value of integer.
 ...                ECDSA P521 test vectors (SHA512)                   103   104 - changing tag value of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   103   104 - changing tag value of integer.
 ...                ECDSA P521 test vectors (SHA512)                   104   105 - changing tag value of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   104   105 - changing tag value of integer.
 ...                ECDSA P521 test vectors (SHA512)                   105   106 - changing tag value of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   105   106 - changing tag value of integer.
 ...                ECDSA P521 test vectors (SHA512)                   106   107 - changing tag value of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   106   107 - changing tag value of integer.
 ...                ECDSA P521 test vectors (SHA512)                   107   108 - changing tag value of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   107   108 - changing tag value of integer.
 ...                ECDSA P521 test vectors (SHA512)                   108   109 - changing tag value of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   108   109 - changing tag value of integer.
 ...                ECDSA P521 test vectors (SHA512)                   109   110 - changing tag value of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   109   110 - changing tag value of integer.
 ...                ECDSA P521 test vectors (SHA512)                   110   111 - changing tag value of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   110   111 - changing tag value of integer.
 ...                ECDSA P521 test vectors (SHA512)                   111   112 - dropping value of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   111   112 - dropping value of integer.
 ...                ECDSA P521 test vectors (SHA512)                   112   113 - dropping value of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   112   113 - dropping value of integer.
 ...                ECDSA P521 test vectors (SHA512)                   113   114 - using composition for integer.
[OK]                ECDSA P521 test vectors (SHA512)                   113   114 - using composition for integer.
 ...                ECDSA P521 test vectors (SHA512)                   114   115 - using composition for integer.
[OK]                ECDSA P521 test vectors (SHA512)                   114   115 - using composition for integer.
 ...                ECDSA P521 test vectors (SHA512)                   115   116 - modify first byte of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   115   116 - modify first byte of integer.
 ...                ECDSA P521 test vectors (SHA512)                   116   117 - modify first byte of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   116   117 - modify first byte of integer.
 ...                ECDSA P521 test vectors (SHA512)                   117   118 - modify last byte of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   117   118 - modify last byte of integer.
 ...                ECDSA P521 test vectors (SHA512)                   118   119 - modify last byte of integer.
[OK]                ECDSA P521 test vectors (SHA512)                   118   119 - modify last byte of integer.
 ...                ECDSA P521 test vectors (SHA512)                   119   120 - truncated integer.
[OK]                ECDSA P521 test vectors (SHA512)                   119   120 - truncated integer.
 ...                ECDSA P521 test vectors (SHA512)                   120   121 - truncated integer.
[OK]                ECDSA P521 test vectors (SHA512)                   120   121 - truncated integer.
 ...                ECDSA P521 test vectors (SHA512)                   121   122 - truncated integer.
[OK]                ECDSA P521 test vectors (SHA512)                   121   122 - truncated integer.
 ...                ECDSA P521 test vectors (SHA512)                   122   123 - truncated integer.
[OK]                ECDSA P521 test vectors (SHA512)                   122   123 - truncated integer.
 ...                ECDSA P521 test vectors (SHA512)                   123   124 - leading ff in integer.
[OK]                ECDSA P521 test vectors (SHA512)                   123   124 - leading ff in integer.
 ...                ECDSA P521 test vectors (SHA512)                   124   125 - leading ff in integer.
[OK]                ECDSA P521 test vectors (SHA512)                   124   125 - leading ff in integer.
 ...                ECDSA P521 test vectors (SHA512)                   125   126 - replaced integer by infinity.
[OK]                ECDSA P521 test vectors (SHA512)                   125   126 - replaced integer by infinity.
 ...                ECDSA P521 test vectors (SHA512)                   126   127 - replaced integer by infinity.
[OK]                ECDSA P521 test vectors (SHA512)                   126   127 - replaced integer by infinity.
 ...                ECDSA P521 test vectors (SHA512)                   127   128 - replacing integer with zero.
[OK]                ECDSA P521 test vectors (SHA512)                   127   128 - replacing integer with zero.
 ...                ECDSA P521 test vectors (SHA512)                   128   129 - replacing integer with zero.
[OK]                ECDSA P521 test vectors (SHA512)                   128   129 - replacing integer with zero.
 ...                ECDSA P521 test vectors (SHA512)                   129   130 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   129   130 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   142   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   142   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   143   144 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA P521 test vectors (SHA512)                   143   144 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA P521 test vectors (SHA512)                   144   145 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   144   145 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   145   146 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   145   146 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   146   147 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   146   147 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   147   148 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   147   148 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   148   149 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   148   149 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   149   150 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   149   150 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   150   151 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   150   151 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   151   152 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   151   152 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   152   153 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   152   153 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   153   154 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   153   154 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   154   155 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   154   155 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   155   156 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   155   156 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   156   157 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   156   157 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   157   158 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   157   158 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   158   159 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   158   159 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   159   160 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   159   160 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   160   161 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   160   161 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   161   162 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   161   162 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   162   163 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   162   163 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   163   164 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   163   164 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   164   165 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   164   165 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   165   166 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   165   166 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   166   167 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   166   167 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   167   168 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   167   168 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   168   169 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   168   169 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   169   170 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   169   170 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   170   171 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   170   171 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   171   172 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   171   172 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   172   173 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   172   173 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   173   174 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   173   174 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   174   175 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   174   175 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   175   176 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   175   176 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   176   177 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   176   177 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   177   178 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   177   178 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   178   179 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   178   179 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   179   180 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   179   180 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   180   181 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   180   181 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   181   182 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   181   182 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   182   183 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   182   183 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   183   184 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   183   184 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   184   185 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   184   185 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   185   186 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   185   186 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   186   187 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   186   187 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   187   188 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   187   188 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   188   189 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   188   189 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   189   190 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   189   190 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   190   191 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   190   191 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   191   192 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   191   192 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   192   193 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   192   193 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   193   194 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   193   194 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   194   195 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   194   195 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   195   196 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   195   196 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   196   197 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   196   197 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   197   198 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   197   198 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   198   199 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   198   199 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   199   200 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   199   200 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   200   201 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   200   201 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   201   202 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   201   202 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   202   203 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   202   203 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   203   204 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   203   204 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   204   205 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   204   205 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   205   206 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   205   206 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   206   207 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   206   207 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   207   208 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   207   208 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   208   209 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   208   209 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   209   210 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   209   210 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   210   211 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   210   211 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   211   212 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   211   212 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   212   213 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   212   213 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   213   214 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   213   214 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   214   215 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   214   215 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   215   216 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   215   216 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   216   217 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   216   217 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   217   218 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   217   218 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   218   219 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   218   219 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   219   220 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   219   220 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   220   221 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   220   221 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   221   222 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   221   222 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   222   223 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   222   223 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   223   224 - Signature with special case values for r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   223   224 - Signature with special case values for r and s.
 ...                ECDSA P521 test vectors (SHA512)                   224   225 - Signature encoding contains wrong types.
[OK]                ECDSA P521 test vectors (SHA512)                   224   225 - Signature encoding contains wrong types.
 ...                ECDSA P521 test vectors (SHA512)                   225   226 - Signature encoding contains wrong types.
[OK]                ECDSA P521 test vectors (SHA512)                   225   226 - Signature encoding contains wrong types.
 ...                ECDSA P521 test vectors (SHA512)                   226   227 - Signature encoding contains wrong types.
[OK]                ECDSA P521 test vectors (SHA512)                   226   227 - Signature encoding contains wrong types.
 ...                ECDSA P521 test vectors (SHA512)                   227   228 - Signature encoding contains wrong types.
[OK]                ECDSA P521 test vectors (SHA512)                   227   228 - Signature encoding contains wrong types.
 ...                ECDSA P521 test vectors (SHA512)                   228   229 - Signature encoding contains wrong types.
[OK]                ECDSA P521 test vectors (SHA512)                   228   229 - Signature encoding contains wrong types.
 ...                ECDSA P521 test vectors (SHA512)                   229   230 - Signature encoding contains wrong types.
[OK]                ECDSA P521 test vectors (SHA512)                   229   230 - Signature encoding contains wrong types.
 ...                ECDSA P521 test vectors (SHA512)                   230   231 - Edge case for Shamir multiplication.
[OK]                ECDSA P521 test vectors (SHA512)                   230   231 - Edge case for Shamir multiplication.
 ...                ECDSA P521 test vectors (SHA512)                   231   232 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   231   232 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   232   233 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   232   233 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   233   234 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   233   234 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   234   235 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   234   235 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   235   236 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   235   236 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   236   237 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   236   237 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   237   238 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   237   238 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   238   239 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   238   239 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   239   240 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   239   240 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   240   241 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   240   241 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   241   242 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   241   242 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   242   243 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   242   243 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   243   244 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   243   244 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   244   245 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   244   245 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   245   246 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   245   246 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   246   247 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   246   247 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   247   248 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   247   248 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   248   249 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   248   249 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   249   250 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   249   250 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   250   251 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   250   251 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   251   252 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   251   252 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   252   253 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   252   253 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   253   254 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   253   254 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   254   255 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   254   255 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   255   256 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   255   256 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   256   257 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   256   257 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   257   258 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   257   258 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   258   259 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   258   259 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   259   260 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   259   260 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   260   261 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   260   261 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   261   262 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   261   262 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   262   263 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   262   263 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   263   264 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   263   264 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   264   265 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   264   265 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   265   266 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   265   266 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   266   267 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   266   267 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   267   268 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   267   268 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   268   269 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   268   269 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   269   270 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   269   270 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   270   271 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   270   271 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   271   272 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   271   272 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   272   273 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   272   273 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   273   274 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   273   274 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   274   275 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   274   275 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   275   276 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   275   276 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   276   277 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   276   277 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   277   278 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   277   278 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   278   279 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   278   279 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   279   280 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   279   280 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   280   281 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   280   281 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   281   282 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   281   282 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   282   283 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   282   283 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   283   284 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   283   284 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   284   285 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   284   285 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   285   286 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   285   286 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   286   287 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   286   287 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   287   288 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   287   288 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   288   289 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   288   289 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   289   290 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   289   290 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   290   291 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   290   291 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   291   292 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   291   292 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   292   293 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   292   293 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   293   294 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   293   294 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   294   295 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   294   295 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   295   296 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   295   296 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   296   297 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   296   297 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   297   298 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   297   298 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   298   299 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   298   299 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   299   300 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   299   300 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   300   301 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   300   301 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   301   302 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   301   302 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   302   303 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   302   303 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   303   304 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   303   304 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   304   305 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   304   305 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   305   306 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   305   306 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   306   307 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   306   307 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   307   308 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   307   308 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   308   309 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   308   309 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   309   310 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   309   310 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   310   311 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   310   311 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   311   312 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   311   312 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   312   313 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   312   313 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   313   314 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   313   314 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   314   315 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   314   315 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   315   316 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   315   316 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   316   317 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   316   317 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   317   318 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   317   318 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   318   319 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   318   319 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   319   320 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   319   320 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   320   321 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   320   321 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   321   322 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   321   322 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   322   323 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   322   323 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   323   324 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   323   324 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   324   325 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   324   325 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   325   326 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   325   326 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   326   327 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   326   327 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   327   328 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   327   328 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   328   329 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   328   329 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   329   330 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   329   330 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   330   331 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   330   331 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   331   332 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   331   332 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   332   333 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   332   333 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   333   334 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   333   334 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   334   335 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   334   335 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   335   336 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   335   336 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   336   337 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   336   337 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   337   338 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   337   338 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   338   339 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   338   339 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   339   340 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   339   340 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   340   341 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   340   341 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   341   342 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   341   342 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   342   343 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   342   343 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   343   344 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   343   344 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   344   345 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   344   345 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   345   346 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   345   346 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   346   347 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   346   347 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   347   348 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   347   348 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   348   349 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   348   349 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   349   350 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   349   350 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   350   351 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   350   351 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   351   352 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   351   352 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   352   353 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   352   353 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   353   354 - special case hash.
[OK]                ECDSA P521 test vectors (SHA512)                   353   354 - special case hash.
 ...                ECDSA P521 test vectors (SHA512)                   354   355 - k*G has a large x-coordinate.
[OK]                ECDSA P521 test vectors (SHA512)                   354   355 - k*G has a large x-coordinate.
 ...                ECDSA P521 test vectors (SHA512)                   355   356 - r too large.
[OK]                ECDSA P521 test vectors (SHA512)                   355   356 - r too large.
 ...                ECDSA P521 test vectors (SHA512)                   356   357 - r,s are large.
[OK]                ECDSA P521 test vectors (SHA512)                   356   357 - r,s are large.
 ...                ECDSA P521 test vectors (SHA512)                   357   358 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA P521 test vectors (SHA512)                   357   358 - r and s^-1 have a large Hamming weight.
 ...                ECDSA P521 test vectors (SHA512)                   358   359 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA P521 test vectors (SHA512)                   358   359 - r and s^-1 have a large Hamming weight.
 ...                ECDSA P521 test vectors (SHA512)                   359   360 - small r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   359   360 - small r and s.
 ...                ECDSA P521 test vectors (SHA512)                   360   361 - small r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   360   361 - small r and s.
 ...                ECDSA P521 test vectors (SHA512)                   361   362 - small r and s.
[OK]                ECDSA P521 test vectors (SHA512)                   361   362 - small r and s.
 ...                ECDSA P521 test vectors (SHA512)                   362   363 - r is larger than n.
[OK]                ECDSA P521 test vectors (SHA512)                   362   363 - r is larger than n.
 ...                ECDSA P521 test vectors (SHA512)                   363   364 - s is larger than n.
[OK]                ECDSA P521 test vectors (SHA512)                   363   364 - s is larger than n.
 ...                ECDSA P521 test vectors (SHA512)                   364   365 - small r and s^-1.
[OK]                ECDSA P521 test vectors (SHA512)                   364   365 - small r and s^-1.
 ...                ECDSA P521 test vectors (SHA512)                   365   366 - smallish r and s^-1.
[OK]                ECDSA P521 test vectors (SHA512)                   365   366 - smallish r and s^-1.
 ...                ECDSA P521 test vectors (SHA512)                   366   367 - 100-bit r and small s^-1.
[OK]                ECDSA P521 test vectors (SHA512)                   366   367 - 100-bit r and small s^-1.
 ...                ECDSA P521 test vectors (SHA512)                   367   368 - small r and 100 bit s^-1.
[OK]                ECDSA P521 test vectors (SHA512)                   367   368 - small r and 100 bit s^-1.
 ...                ECDSA P521 test vectors (SHA512)                   368   369 - 100-bit r and s^-1.
[OK]                ECDSA P521 test vectors (SHA512)                   368   369 - 100-bit r and s^-1.
 ...                ECDSA P521 test vectors (SHA512)                   369   370 - r and s^-1 are close to n.
[OK]                ECDSA P521 test vectors (SHA512)                   369   370 - r and s^-1 are close to n.
 ...                ECDSA P521 test vectors (SHA512)                   370   371 - s == 1.
[OK]                ECDSA P521 test vectors (SHA512)                   370   371 - s == 1.
 ...                ECDSA P521 test vectors (SHA512)                   371   372 - s == 0.
[OK]                ECDSA P521 test vectors (SHA512)                   371   372 - s == 0.
 ...                ECDSA P521 test vectors (SHA512)                   372   373 - point at infinity during verify.
[OK]                ECDSA P521 test vectors (SHA512)                   372   373 - point at infinity during verify.
 ...                ECDSA P521 test vectors (SHA512)                   373   374 - edge case for signature malleability.
[OK]                ECDSA P521 test vectors (SHA512)                   373   374 - edge case for signature malleability.
 ...                ECDSA P521 test vectors (SHA512)                   374   375 - edge case for signature malleability.
[OK]                ECDSA P521 test vectors (SHA512)                   374   375 - edge case for signature malleability.
 ...                ECDSA P521 test vectors (SHA512)                   375   376 - u1 == 1.
[OK]                ECDSA P521 test vectors (SHA512)                   375   376 - u1 == 1.
 ...                ECDSA P521 test vectors (SHA512)                   376   377 - u1 == n - 1.
[OK]                ECDSA P521 test vectors (SHA512)                   376   377 - u1 == n - 1.
 ...                ECDSA P521 test vectors (SHA512)                   377   378 - u2 == 1.
[OK]                ECDSA P521 test vectors (SHA512)                   377   378 - u2 == 1.
 ...                ECDSA P521 test vectors (SHA512)                   378   379 - u2 == n - 1.
[OK]                ECDSA P521 test vectors (SHA512)                   378   379 - u2 == n - 1.
 ...                ECDSA P521 test vectors (SHA512)                   379   380 - edge case for u1.
[OK]                ECDSA P521 test vectors (SHA512)                   379   380 - edge case for u1.
 ...                ECDSA P521 test vectors (SHA512)                   380   381 - edge case for u1.
[OK]                ECDSA P521 test vectors (SHA512)                   380   381 - edge case for u1.
 ...                ECDSA P521 test vectors (SHA512)                   381   382 - edge case for u1.
[OK]                ECDSA P521 test vectors (SHA512)                   381   382 - edge case for u1.
 ...                ECDSA P521 test vectors (SHA512)                   382   383 - edge case for u1.
[OK]                ECDSA P521 test vectors (SHA512)                   382   383 - edge case for u1.
 ...                ECDSA P521 test vectors (SHA512)                   383   384 - edge case for u1.
[OK]                ECDSA P521 test vectors (SHA512)                   383   384 - edge case for u1.
 ...                ECDSA P521 test vectors (SHA512)                   384   385 - edge case for u1.
[OK]                ECDSA P521 test vectors (SHA512)                   384   385 - edge case for u1.
 ...                ECDSA P521 test vectors (SHA512)                   385   386 - edge case for u1.
[OK]                ECDSA P521 test vectors (SHA512)                   385   386 - edge case for u1.
 ...                ECDSA P521 test vectors (SHA512)                   386   387 - edge case for u1.
[OK]                ECDSA P521 test vectors (SHA512)                   386   387 - edge case for u1.
 ...                ECDSA P521 test vectors (SHA512)                   387   388 - edge case for u1.
[OK]                ECDSA P521 test vectors (SHA512)                   387   388 - edge case for u1.
 ...                ECDSA P521 test vectors (SHA512)                   388   389 - edge case for u1.
[OK]                ECDSA P521 test vectors (SHA512)                   388   389 - edge case for u1.
 ...                ECDSA P521 test vectors (SHA512)                   389   390 - edge case for u1.
[OK]                ECDSA P521 test vectors (SHA512)                   389   390 - edge case for u1.
 ...                ECDSA P521 test vectors (SHA512)                   390   391 - edge case for u1.
[OK]                ECDSA P521 test vectors (SHA512)                   390   391 - edge case for u1.
 ...                ECDSA P521 test vectors (SHA512)                   391   392 - edge case for u1.
[OK]                ECDSA P521 test vectors (SHA512)                   391   392 - edge case for u1.
 ...                ECDSA P521 test vectors (SHA512)                   392   393 - edge case for u1.
[OK]                ECDSA P521 test vectors (SHA512)                   392   393 - edge case for u1.
 ...                ECDSA P521 test vectors (SHA512)                   393   394 - edge case for u2.
[OK]                ECDSA P521 test vectors (SHA512)                   393   394 - edge case for u2.
 ...                ECDSA P521 test vectors (SHA512)                   394   395 - edge case for u2.
[OK]                ECDSA P521 test vectors (SHA512)                   394   395 - edge case for u2.
 ...                ECDSA P521 test vectors (SHA512)                   395   396 - edge case for u2.
[OK]                ECDSA P521 test vectors (SHA512)                   395   396 - edge case for u2.
 ...                ECDSA P521 test vectors (SHA512)                   396   397 - edge case for u2.
[OK]                ECDSA P521 test vectors (SHA512)                   396   397 - edge case for u2.
 ...                ECDSA P521 test vectors (SHA512)                   397   398 - edge case for u2.
[OK]                ECDSA P521 test vectors (SHA512)                   397   398 - edge case for u2.
 ...                ECDSA P521 test vectors (SHA512)                   398   399 - edge case for u2.
[OK]                ECDSA P521 test vectors (SHA512)                   398   399 - edge case for u2.
 ...                ECDSA P521 test vectors (SHA512)                   399   400 - edge case for u2.
[OK]                ECDSA P521 test vectors (SHA512)                   399   400 - edge case for u2.
 ...                ECDSA P521 test vectors (SHA512)                   400   401 - edge case for u2.
[OK]                ECDSA P521 test vectors (SHA512)                   400   401 - edge case for u2.
 ...                ECDSA P521 test vectors (SHA512)                   401   402 - edge case for u2.
[OK]                ECDSA P521 test vectors (SHA512)                   401   402 - edge case for u2.
 ...                ECDSA P521 test vectors (SHA512)                   402   403 - edge case for u2.
[OK]                ECDSA P521 test vectors (SHA512)                   402   403 - edge case for u2.
 ...                ECDSA P521 test vectors (SHA512)                   403   404 - edge case for u2.
[OK]                ECDSA P521 test vectors (SHA512)                   403   404 - edge case for u2.
 ...                ECDSA P521 test vectors (SHA512)                   404   405 - edge case for u2.
[OK]                ECDSA P521 test vectors (SHA512)                   404   405 - edge case for u2.
 ...                ECDSA P521 test vectors (SHA512)                   405   406 - edge case for u2.
[OK]                ECDSA P521 test vectors (SHA512)                   405   406 - edge case for u2.
 ...                ECDSA P521 test vectors (SHA512)                   406   407 - edge case for u2.
[OK]                ECDSA P521 test vectors (SHA512)                   406   407 - edge case for u2.
 ...                ECDSA P521 test vectors (SHA512)                   407   408 - point duplication during verification.
[OK]                ECDSA P521 test vectors (SHA512)                   407   408 - point duplication during verification.
 ...                ECDSA P521 test vectors (SHA512)                   408   409 - duplication bug.
[OK]                ECDSA P521 test vectors (SHA512)                   408   409 - duplication bug.
 ...                ECDSA P521 test vectors (SHA512)                   409   410 - point with x-coordinate 0.
[OK]                ECDSA P521 test vectors (SHA512)                   409   410 - point with x-coordinate 0.
 ...                ECDSA P521 test vectors (SHA512)                   410   411 - point with x-coordinate 0.
[OK]                ECDSA P521 test vectors (SHA512)                   410   411 - point with x-coordinate 0.
 ...                ECDSA P521 test vectors (SHA512)                   411   412 - comparison with point at infinity .
[OK]                ECDSA P521 test vectors (SHA512)                   411   412 - comparison with point at infinity .
 ...                ECDSA P521 test vectors (SHA512)                   412   413 - extreme value for k and edgecase s.
[OK]                ECDSA P521 test vectors (SHA512)                   412   413 - extreme value for k and edgecase s.
 ...                ECDSA P521 test vectors (SHA512)                   413   414 - extreme value for k and s^-1.
[OK]                ECDSA P521 test vectors (SHA512)                   413   414 - extreme value for k and s^-1.
 ...                ECDSA P521 test vectors (SHA512)                   414   415 - extreme value for k and s^-1.
[OK]                ECDSA P521 test vectors (SHA512)                   414   415 - extreme value for k and s^-1.
 ...                ECDSA P521 test vectors (SHA512)                   415   416 - extreme value for k and s^-1.
[OK]                ECDSA P521 test vectors (SHA512)                   415   416 - extreme value for k and s^-1.
 ...                ECDSA P521 test vectors (SHA512)                   416   417 - extreme value for k and s^-1.
[OK]                ECDSA P521 test vectors (SHA512)                   416   417 - extreme value for k and s^-1.
 ...                ECDSA P521 test vectors (SHA512)                   417   418 - extreme value for k.
[OK]                ECDSA P521 test vectors (SHA512)                   417   418 - extreme value for k.
 ...                ECDSA P521 test vectors (SHA512)                   418   419 - extreme value for k and edgecase s.
[OK]                ECDSA P521 test vectors (SHA512)                   418   419 - extreme value for k and edgecase s.
 ...                ECDSA P521 test vectors (SHA512)                   419   420 - extreme value for k and s^-1.
[OK]                ECDSA P521 test vectors (SHA512)                   419   420 - extreme value for k and s^-1.
 ...                ECDSA P521 test vectors (SHA512)                   420   421 - extreme value for k and s^-1.
[OK]                ECDSA P521 test vectors (SHA512)                   420   421 - extreme value for k and s^-1.
 ...                ECDSA P521 test vectors (SHA512)                   421   422 - extreme value for k and s^-1.
[OK]                ECDSA P521 test vectors (SHA512)                   421   422 - extreme value for k and s^-1.
 ...                ECDSA P521 test vectors (SHA512)                   422   423 - extreme value for k and s^-1.
[OK]                ECDSA P521 test vectors (SHA512)                   422   423 - extreme value for k and s^-1.
 ...                ECDSA P521 test vectors (SHA512)                   423   424 - extreme value for k.
[OK]                ECDSA P521 test vectors (SHA512)                   423   424 - extreme value for k.
 ...                ECDSA P521 test vectors (SHA512)                   424   425 - testing point duplication.
[OK]                ECDSA P521 test vectors (SHA512)                   424   425 - testing point duplication.
 ...                ECDSA P521 test vectors (SHA512)                   425   426 - testing point duplication.
[OK]                ECDSA P521 test vectors (SHA512)                   425   426 - testing point duplication.
 ...                ECDSA P521 test vectors (SHA512)                   426   427 - testing point duplication.
[OK]                ECDSA P521 test vectors (SHA512)                   426   427 - testing point duplication.
 ...                ECDSA P521 test vectors (SHA512)                   427   428 - testing point duplication.
[OK]                ECDSA P521 test vectors (SHA512)                   427   428 - testing point duplication.
 ...                ECDSA P521 test vectors (SHA512)                   428   429 - pseudorandom signature.
[OK]                ECDSA P521 test vectors (SHA512)                   428   429 - pseudorandom signature.
 ...                ECDSA P521 test vectors (SHA512)                   429   430 - pseudorandom signature.
[OK]                ECDSA P521 test vectors (SHA512)                   429   430 - pseudorandom signature.
 ...                ECDSA P521 test vectors (SHA512)                   430   431 - pseudorandom signature.
[OK]                ECDSA P521 test vectors (SHA512)                   430   431 - pseudorandom signature.
 ...                ECDSA P521 test vectors (SHA512)                   431   432 - pseudorandom signature.
[OK]                ECDSA P521 test vectors (SHA512)                   431   432 - pseudorandom signature.
 ...                ECDSA P521 test vectors (SHA512)                   432   433 - y-coordinate of the public key is small.
[OK]                ECDSA P521 test vectors (SHA512)                   432   433 - y-coordinate of the public key is small.
 ...                ECDSA P521 test vectors (SHA512)                   433   434 - y-coordinate of the public key is small.
[OK]                ECDSA P521 test vectors (SHA512)                   433   434 - y-coordinate of the public key is small.
 ...                ECDSA P521 test vectors (SHA512)                   434   435 - y-coordinate of the public key is small.
[OK]                ECDSA P521 test vectors (SHA512)                   434   435 - y-coordinate of the public key is small.
 ...                ECDSA P521 test vectors (SHA512)                   435   436 - y-coordinate of the public key is large.
[OK]                ECDSA P521 test vectors (SHA512)                   435   436 - y-coordinate of the public key is large.
 ...                ECDSA P521 test vectors (SHA512)                   436   437 - y-coordinate of the public key is large.
[OK]                ECDSA P521 test vectors (SHA512)                   436   437 - y-coordinate of the public key is large.
 ...                ECDSA P521 test vectors (SHA512)                   437   438 - y-coordinate of the public key is large.
[OK]                ECDSA P521 test vectors (SHA512)                   437   438 - y-coordinate of the public key is large.
 ...                ECDSA P521 test vectors (SHA512)                   438   439 - x-coordinate of the public key is small.
[OK]                ECDSA P521 test vectors (SHA512)                   438   439 - x-coordinate of the public key is small.
 ...                ECDSA P521 test vectors (SHA512)                   439   440 - x-coordinate of the public key is small.
[OK]                ECDSA P521 test vectors (SHA512)                   439   440 - x-coordinate of the public key is small.
 ...                ECDSA P521 test vectors (SHA512)                   440   441 - x-coordinate of the public key is small.
[OK]                ECDSA P521 test vectors (SHA512)                   440   441 - x-coordinate of the public key is small.
 ...                ECDSA P521 test vectors (SHA512)                   441   442 - x-coordinate of the public key is large.
[OK]                ECDSA P521 test vectors (SHA512)                   441   442 - x-coordinate of the public key is large.
 ...                ECDSA P521 test vectors (SHA512)                   442   443 - x-coordinate of the public key is large.
[OK]                ECDSA P521 test vectors (SHA512)                   442   443 - x-coordinate of the public key is large.
 ...                ECDSA P521 test vectors (SHA512)                   443   444 - x-coordinate of the public key is large.
[OK]                ECDSA P521 test vectors (SHA512)                   443   444 - x-coordinate of the public key is large.
 ...                ECDSA P521 test vectors (SHA512)                   444   445 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P521 test vectors (SHA512)                   444   445 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA P521 test vectors (SHA512)                   445   446 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P521 test vectors (SHA512)                   445   446 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA P521 test vectors (SHA512)                   446   447 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA P521 test vectors (SHA512)                   446   447 - y-coordinate of the public key has many trailing 1's.
 ...                X25519 test vectors                                  0   1 - normal case.
[OK]                X25519 test vectors                                  0   1 - normal case.
 ...                X25519 test vectors                                  1   2 - public key on twist.
[OK]                X25519 test vectors                                  1   2 - public key on twist.
 ...                X25519 test vectors                                  2   3 - public key on twist.
[OK]                X25519 test vectors                                  2   3 - public key on twist.
 ...                X25519 test vectors                                  3   4 - public key on twist.
[OK]                X25519 test vectors                                  3   4 - public key on twist.
 ...                X25519 test vectors                                  4   5 - public key on twist.
[OK]                X25519 test vectors                                  4   5 - public key on twist.
 ...                X25519 test vectors                                  5   6 - public key on twist.
[OK]                X25519 test vectors                                  5   6 - public key on twist.
 ...                X25519 test vectors                                  6   7 - public key on twist.
[OK]                X25519 test vectors                                  6   7 - public key on twist.
 ...                X25519 test vectors                                  7   8 - public key on twist.
[OK]                X25519 test vectors                                  7   8 - public key on twist.
 ...                X25519 test vectors                                  8   9 - public key on twist.
[OK]                X25519 test vectors                                  8   9 - public key on twist.
 ...                X25519 test vectors                                  9   10 - public key on twist.
[OK]                X25519 test vectors                                  9   10 - public key on twist.
 ...                X25519 test vectors                                 10   11 - public key on twist.
[OK]                X25519 test vectors                                 10   11 - public key on twist.
 ...                X25519 test vectors                                 11   12 - public key on twist.
[OK]                X25519 test vectors                                 11   12 - public key on twist.
 ...                X25519 test vectors                                 12   13 - public key on twist.
[OK]                X25519 test vectors                                 12   13 - public key on twist.
 ...                X25519 test vectors                                 13   14 - public key on twist.
[OK]                X25519 test vectors                                 13   14 - public key on twist.
 ...                X25519 test vectors                                 14   15 - public key on twist.
[OK]                X25519 test vectors                                 14   15 - public key on twist.
 ...                X25519 test vectors                                 15   16 - public key on twist.
[OK]                X25519 test vectors                                 15   16 - public key on twist.
 ...                X25519 test vectors                                 16   17 - public key on twist.
[OK]                X25519 test vectors                                 16   17 - public key on twist.
 ...                X25519 test vectors                                 17   18 - public key on twist.
[OK]                X25519 test vectors                                 17   18 - public key on twist.
 ...                X25519 test vectors                                 18   19 - public key on twist.
[OK]                X25519 test vectors                                 18   19 - public key on twist.
 ...                X25519 test vectors                                 19   20 - public key on twist.
[OK]                X25519 test vectors                                 19   20 - public key on twist.
 ...                X25519 test vectors                                 20   21 - public key on twist.
[OK]                X25519 test vectors                                 20   21 - public key on twist.
 ...                X25519 test vectors                                 21   22 - public key on twist.
[OK]                X25519 test vectors                                 21   22 - public key on twist.
 ...                X25519 test vectors                                 22   23 - public key on twist.
[OK]                X25519 test vectors                                 22   23 - public key on twist.
 ...                X25519 test vectors                                 23   24 - public key on twist.
[OK]                X25519 test vectors                                 23   24 - public key on twist.
 ...                X25519 test vectors                                 24   25 - public key on twist.
[OK]                X25519 test vectors                                 24   25 - public key on twist.
 ...                X25519 test vectors                                 25   26 - public key on twist.
[OK]                X25519 test vectors                                 25   26 - public key on twist.
 ...                X25519 test vectors                                 26   27 - public key on twist.
[OK]                X25519 test vectors                                 26   27 - public key on twist.
 ...                X25519 test vectors                                 27   28 - public key on twist.
[OK]                X25519 test vectors                                 27   28 - public key on twist.
 ...                X25519 test vectors                                 28   29 - public key on twist.
[OK]                X25519 test vectors                                 28   29 - public key on twist.
 ...                X25519 test vectors                                 29   30 - public key on twist.
[OK]                X25519 test vectors                                 29   30 - public key on twist.
 ...                X25519 test vectors                                 30   31 - public key on twist.
[OK]                X25519 test vectors                                 30   31 - public key on twist.
 ...                X25519 test vectors                                 31   32 - public key = 0.
[OK]                X25519 test vectors                                 31   32 - public key = 0.
 ...                X25519 test vectors                                 32   33 - public key = 1.
[OK]                X25519 test vectors                                 32   33 - public key = 1.
 ...                X25519 test vectors                                 33   34 - edge case public key.
[OK]                X25519 test vectors                                 33   34 - edge case public key.
 ...                X25519 test vectors                                 34   35 - edge case public key.
[OK]                X25519 test vectors                                 34   35 - edge case public key.
 ...                X25519 test vectors                                 35   36 - edge case public key.
[OK]                X25519 test vectors                                 35   36 - edge case public key.
 ...                X25519 test vectors                                 36   37 - edge case public key.
[OK]                X25519 test vectors                                 36   37 - edge case public key.
 ...                X25519 test vectors                                 37   38 - edge case public key.
[OK]                X25519 test vectors                                 37   38 - edge case public key.
 ...                X25519 test vectors                                 38   39 - edge case public key.
[OK]                X25519 test vectors                                 38   39 - edge case public key.
 ...                X25519 test vectors                                 39   40 - edge case public key.
[OK]                X25519 test vectors                                 39   40 - edge case public key.
 ...                X25519 test vectors                                 40   41 - edge case public key.
[OK]                X25519 test vectors                                 40   41 - edge case public key.
 ...                X25519 test vectors                                 41   42 - edge case public key.
[OK]                X25519 test vectors                                 41   42 - edge case public key.
 ...                X25519 test vectors                                 42   43 - edge case public key.
[OK]                X25519 test vectors                                 42   43 - edge case public key.
 ...                X25519 test vectors                                 43   44 - edge case public key.
[OK]                X25519 test vectors                                 43   44 - edge case public key.
 ...                X25519 test vectors                                 44   45 - edge case public key.
[OK]                X25519 test vectors                                 44   45 - edge case public key.
 ...                X25519 test vectors                                 45   46 - edge case public key.
[OK]                X25519 test vectors                                 45   46 - edge case public key.
 ...                X25519 test vectors                                 46   47 - edge case public key.
[OK]                X25519 test vectors                                 46   47 - edge case public key.
 ...                X25519 test vectors                                 47   48 - edge case public key.
[OK]                X25519 test vectors                                 47   48 - edge case public key.
 ...                X25519 test vectors                                 48   49 - edge case public key.
[OK]                X25519 test vectors                                 48   49 - edge case public key.
 ...                X25519 test vectors                                 49   50 - edge case public key.
[OK]                X25519 test vectors                                 49   50 - edge case public key.
 ...                X25519 test vectors                                 50   51 - edge case public key.
[OK]                X25519 test vectors                                 50   51 - edge case public key.
 ...                X25519 test vectors                                 51   52 - edge case public key.
[OK]                X25519 test vectors                                 51   52 - edge case public key.
 ...                X25519 test vectors                                 52   53 - edge case public key.
[OK]                X25519 test vectors                                 52   53 - edge case public key.
 ...                X25519 test vectors                                 53   54 - edge case public key.
[OK]                X25519 test vectors                                 53   54 - edge case public key.
 ...                X25519 test vectors                                 54   55 - edge case public key.
[OK]                X25519 test vectors                                 54   55 - edge case public key.
 ...                X25519 test vectors                                 55   56 - edge case public key.
[OK]                X25519 test vectors                                 55   56 - edge case public key.
 ...                X25519 test vectors                                 56   57 - edge case public key.
[OK]                X25519 test vectors                                 56   57 - edge case public key.
 ...                X25519 test vectors                                 57   58 - edge case public key.
[OK]                X25519 test vectors                                 57   58 - edge case public key.
 ...                X25519 test vectors                                 58   59 - edge case public key.
[OK]                X25519 test vectors                                 58   59 - edge case public key.
 ...                X25519 test vectors                                 59   60 - edge case public key.
[OK]                X25519 test vectors                                 59   60 - edge case public key.
 ...                X25519 test vectors                                 60   61 - edge case public key.
[OK]                X25519 test vectors                                 60   61 - edge case public key.
 ...                X25519 test vectors                                 61   62 - edge case public key.
[OK]                X25519 test vectors                                 61   62 - edge case public key.
 ...                X25519 test vectors                                 62   63 - public key with low order.
[OK]                X25519 test vectors                                 62   63 - public key with low order.
 ...                X25519 test vectors                                 63   64 - public key with low order.
[OK]                X25519 test vectors                                 63   64 - public key with low order.
 ...                X25519 test vectors                                 64   65 - public key with low order.
[OK]                X25519 test vectors                                 64   65 - public key with low order.
 ...                X25519 test vectors                                 65   66 - public key with low order.
[OK]                X25519 test vectors                                 65   66 - public key with low order.
 ...                X25519 test vectors                                 66   67 - public key with low order.
[OK]                X25519 test vectors                                 66   67 - public key with low order.
 ...                X25519 test vectors                                 67   68 - public key with low order.
[OK]                X25519 test vectors                                 67   68 - public key with low order.
 ...                X25519 test vectors                                 68   69 - public key with low order.
[OK]                X25519 test vectors                                 68   69 - public key with low order.
 ...                X25519 test vectors                                 69   70 - public key with low order.
[OK]                X25519 test vectors                                 69   70 - public key with low order.
 ...                X25519 test vectors                                 70   71 - public key with low order.
[OK]                X25519 test vectors                                 70   71 - public key with low order.
 ...                X25519 test vectors                                 71   72 - public key with low order.
[OK]                X25519 test vectors                                 71   72 - public key with low order.
 ...                X25519 test vectors                                 72   73 - public key with low order.
[OK]                X25519 test vectors                                 72   73 - public key with low order.
 ...                X25519 test vectors                                 73   74 - public key with low order.
[OK]                X25519 test vectors                                 73   74 - public key with low order.
 ...                X25519 test vectors                                 74   75 - public key with low order.
[OK]                X25519 test vectors                                 74   75 - public key with low order.
 ...                X25519 test vectors                                 75   76 - public key with low order.
[OK]                X25519 test vectors                                 75   76 - public key with low order.
 ...                X25519 test vectors                                 76   77 - public key with low order.
[OK]                X25519 test vectors                                 76   77 - public key with low order.
 ...                X25519 test vectors                                 77   78 - public key with low order.
[OK]                X25519 test vectors                                 77   78 - public key with low order.
 ...                X25519 test vectors                                 78   79 - public key with low order.
[OK]                X25519 test vectors                                 78   79 - public key with low order.
 ...                X25519 test vectors                                 79   80 - public key with low order.
[OK]                X25519 test vectors                                 79   80 - public key with low order.
 ...                X25519 test vectors                                 80   81 - public key with low order.
[OK]                X25519 test vectors                                 80   81 - public key with low order.
 ...                X25519 test vectors                                 81   82 - public key with low order.
[OK]                X25519 test vectors                                 81   82 - public key with low order.
 ...                X25519 test vectors                                 82   83 - public key = 57896044618658097711785492504343953926634992332820282019728792003956564819949.
[OK]                X25519 test vectors                                 82   83 - public key = 57896044618658097711785492504343953926634992332820282019728792003956564819949.
 ...                X25519 test vectors                                 83   84 - public key = 57896044618658097711785492504343953926634992332820282019728792003956564819950.
[OK]                X25519 test vectors                                 83   84 - public key = 57896044618658097711785492504343953926634992332820282019728792003956564819950.
 ...                X25519 test vectors                                 84   85 - non-canonical public key.
[OK]                X25519 test vectors                                 84   85 - non-canonical public key.
 ...                X25519 test vectors                                 85   86 - non-canonical public key.
[OK]                X25519 test vectors                                 85   86 - non-canonical public key.
 ...                X25519 test vectors                                 86   87 - non-canonical public key.
[OK]                X25519 test vectors                                 86   87 - non-canonical public key.
 ...                X25519 test vectors                                 87   88 - non-canonical public key.
[OK]                X25519 test vectors                                 87   88 - non-canonical public key.
 ...                X25519 test vectors                                 88   89 - non-canonical public key.
[OK]                X25519 test vectors                                 88   89 - non-canonical public key.
 ...                X25519 test vectors                                 89   90 - non-canonical public key.
[OK]                X25519 test vectors                                 89   90 - non-canonical public key.
 ...                X25519 test vectors                                 90   91 - non-canonical public key.
[OK]                X25519 test vectors                                 90   91 - non-canonical public key.
 ...                X25519 test vectors                                 91   92 - non-canonical public key.
[OK]                X25519 test vectors                                 91   92 - non-canonical public key.
 ...                X25519 test vectors                                 92   93 - non-canonical public key.
[OK]                X25519 test vectors                                 92   93 - non-canonical public key.
 ...                X25519 test vectors                                 93   94 - non-canonical public key.
[OK]                X25519 test vectors                                 93   94 - non-canonical public key.
 ...                X25519 test vectors                                 94   95 - non-canonical public key.
[OK]                X25519 test vectors                                 94   95 - non-canonical public key.
 ...                X25519 test vectors                                 95   96 - non-canonical public key.
[OK]                X25519 test vectors                                 95   96 - non-canonical public key.
 ...                X25519 test vectors                                 96   97 - non-canonical public key.
[OK]                X25519 test vectors                                 96   97 - non-canonical public key.
 ...                X25519 test vectors                                 97   98 - public key = 57896044618658097711785492504343953926634992332820282019728792003956564819968.
[OK]                X25519 test vectors                                 97   98 - public key = 57896044618658097711785492504343953926634992332820282019728792003956564819968.
 ...                X25519 test vectors                                 98   99 - public key = 57896044618658097711785492504343953926634992332820282019728792003956564819969.
[OK]                X25519 test vectors                                 98   99 - public key = 57896044618658097711785492504343953926634992332820282019728792003956564819969.
 ...                X25519 test vectors                                 99   100 - RFC 7748.
[OK]                X25519 test vectors                                 99   100 - RFC 7748.
 ...                X25519 test vectors                                100   101 - RFC 7748.
[OK]                X25519 test vectors                                100   101 - RFC 7748.
 ...                X25519 test vectors                                101   102 - RFC 8037, Section A.6.
[OK]                X25519 test vectors                                101   102 - RFC 8037, Section A.6.
 ...                X25519 test vectors                                102   103 - edge case for shared secret.
[OK]                X25519 test vectors                                102   103 - edge case for shared secret.
 ...                X25519 test vectors                                103   104 - edge case for shared secret.
[OK]                X25519 test vectors                                103   104 - edge case for shared secret.
 ...                X25519 test vectors                                104   105 - edge case for shared secret.
[OK]                X25519 test vectors                                104   105 - edge case for shared secret.
 ...                X25519 test vectors                                105   106 - edge case for shared secret.
[OK]                X25519 test vectors                                105   106 - edge case for shared secret.
 ...                X25519 test vectors                                106   107 - edge case for shared secret.
[OK]                X25519 test vectors                                106   107 - edge case for shared secret.
 ...                X25519 test vectors                                107   108 - edge case for shared secret.
[OK]                X25519 test vectors                                107   108 - edge case for shared secret.
 ...                X25519 test vectors                                108   109 - edge case for shared secret.
[OK]                X25519 test vectors                                108   109 - edge case for shared secret.
 ...                X25519 test vectors                                109   110 - edge case for shared secret.
[OK]                X25519 test vectors                                109   110 - edge case for shared secret.
 ...                X25519 test vectors                                110   111 - edge case for shared secret.
[OK]                X25519 test vectors                                110   111 - edge case for shared secret.
 ...                X25519 test vectors                                111   112 - edge case for shared secret.
[OK]                X25519 test vectors                                111   112 - edge case for shared secret.
 ...                X25519 test vectors                                112   113 - edge case for shared secret.
[OK]                X25519 test vectors                                112   113 - edge case for shared secret.
 ...                X25519 test vectors                                113   114 - edge case for shared secret.
[OK]                X25519 test vectors                                113   114 - edge case for shared secret.
 ...                X25519 test vectors                                114   115 - edge case for shared secret.
[OK]                X25519 test vectors                                114   115 - edge case for shared secret.
 ...                X25519 test vectors                                115   116 - edge case for shared secret.
[OK]                X25519 test vectors                                115   116 - edge case for shared secret.
 ...                X25519 test vectors                                116   117 - special case public key.
[OK]                X25519 test vectors                                116   117 - special case public key.
 ...                X25519 test vectors                                117   118 - special case public key.
[OK]                X25519 test vectors                                117   118 - special case public key.
 ...                X25519 test vectors                                118   119 - special case public key.
[OK]                X25519 test vectors                                118   119 - special case public key.
 ...                X25519 test vectors                                119   120 - special case public key.
[OK]                X25519 test vectors                                119   120 - special case public key.
 ...                X25519 test vectors                                120   121 - special case public key.
[OK]                X25519 test vectors                                120   121 - special case public key.
 ...                X25519 test vectors                                121   122 - special case public key.
[OK]                X25519 test vectors                                121   122 - special case public key.
 ...                X25519 test vectors                                122   123 - special case public key.
[OK]                X25519 test vectors                                122   123 - special case public key.
 ...                X25519 test vectors                                123   124 - special case public key.
[OK]                X25519 test vectors                                123   124 - special case public key.
 ...                X25519 test vectors                                124   125 - special case public key.
[OK]                X25519 test vectors                                124   125 - special case public key.
 ...                X25519 test vectors                                125   126 - special case public key.
[OK]                X25519 test vectors                                125   126 - special case public key.
 ...                X25519 test vectors                                126   127 - special case public key.
[OK]                X25519 test vectors                                126   127 - special case public key.
 ...                X25519 test vectors                                127   128 - special case public key.
[OK]                X25519 test vectors                                127   128 - special case public key.
 ...                X25519 test vectors                                128   129 - special case public key.
[OK]                X25519 test vectors                                128   129 - special case public key.
 ...                X25519 test vectors                                129   130 - special case public key.
[OK]                X25519 test vectors                                129   130 - special case public key.
 ...                X25519 test vectors                                130   131 - special case public key.
[OK]                X25519 test vectors                                130   131 - special case public key.
 ...                X25519 test vectors                                131   132 - special case public key.
[OK]                X25519 test vectors                                131   132 - special case public key.
 ...                X25519 test vectors                                132   133 - special case public key.
[OK]                X25519 test vectors                                132   133 - special case public key.
 ...                X25519 test vectors                                133   134 - special case public key.
[OK]                X25519 test vectors                                133   134 - special case public key.
 ...                X25519 test vectors                                134   135 - special case public key.
[OK]                X25519 test vectors                                134   135 - special case public key.
 ...                X25519 test vectors                                135   136 - special case public key.
[OK]                X25519 test vectors                                135   136 - special case public key.
 ...                X25519 test vectors                                136   137 - special case public key.
[OK]                X25519 test vectors                                136   137 - special case public key.
 ...                X25519 test vectors                                137   138 - special case public key.
[OK]                X25519 test vectors                                137   138 - special case public key.
 ...                X25519 test vectors                                138   139 - special case public key.
[OK]                X25519 test vectors                                138   139 - special case public key.
 ...                X25519 test vectors                                139   140 - special case public key.
[OK]                X25519 test vectors                                139   140 - special case public key.
 ...                X25519 test vectors                                140   141 - special case public key.
[OK]                X25519 test vectors                                140   141 - special case public key.
 ...                X25519 test vectors                                141   142 - special case public key.
[OK]                X25519 test vectors                                141   142 - special case public key.
 ...                X25519 test vectors                                142   143 - special case public key.
[OK]                X25519 test vectors                                142   143 - special case public key.
 ...                X25519 test vectors                                143   144 - special case public key.
[OK]                X25519 test vectors                                143   144 - special case public key.
 ...                X25519 test vectors                                144   145 - special case public key.
[OK]                X25519 test vectors                                144   145 - special case public key.
 ...                X25519 test vectors                                145   146 - special case public key.
[OK]                X25519 test vectors                                145   146 - special case public key.
 ...                X25519 test vectors                                146   147 - special case public key.
[OK]                X25519 test vectors                                146   147 - special case public key.
 ...                X25519 test vectors                                147   148 - special case public key.
[OK]                X25519 test vectors                                147   148 - special case public key.
 ...                X25519 test vectors                                148   149 - special case public key.
[OK]                X25519 test vectors                                148   149 - special case public key.
 ...                X25519 test vectors                                149   150 - special case public key.
[OK]                X25519 test vectors                                149   150 - special case public key.
 ...                X25519 test vectors                                150   151 - special case public key.
[OK]                X25519 test vectors                                150   151 - special case public key.
 ...                X25519 test vectors                                151   152 - special case public key.
[OK]                X25519 test vectors                                151   152 - special case public key.
 ...                X25519 test vectors                                152   153 - special case public key.
[OK]                X25519 test vectors                                152   153 - special case public key.
 ...                X25519 test vectors                                153   154 - special case public key.
[OK]                X25519 test vectors                                153   154 - special case public key.
 ...                X25519 test vectors                                154   155 - special case for E in multiplication by 2.
[OK]                X25519 test vectors                                154   155 - special case for E in multiplication by 2.
 ...                X25519 test vectors                                155   156 - special case for E in multiplication by 2.
[OK]                X25519 test vectors                                155   156 - special case for E in multiplication by 2.
 ...                X25519 test vectors                                156   157 - special case for E in multiplication by 2.
[OK]                X25519 test vectors                                156   157 - special case for E in multiplication by 2.
 ...                X25519 test vectors                                157   158 - special case for E in multiplication by 2.
[OK]                X25519 test vectors                                157   158 - special case for E in multiplication by 2.
 ...                X25519 test vectors                                158   159 - special case for E in multiplication by 2.
[OK]                X25519 test vectors                                158   159 - special case for E in multiplication by 2.
 ...                X25519 test vectors                                159   160 - special case for E in multiplication by 2.
[OK]                X25519 test vectors                                159   160 - special case for E in multiplication by 2.
 ...                X25519 test vectors                                160   161 - special case for E in multiplication by 2.
[OK]                X25519 test vectors                                160   161 - special case for E in multiplication by 2.
 ...                X25519 test vectors                                161   162 - special case for E in multiplication by 2.
[OK]                X25519 test vectors                                161   162 - special case for E in multiplication by 2.
 ...                X25519 test vectors                                162   163 - special case for E in multiplication by 2.
[OK]                X25519 test vectors                                162   163 - special case for E in multiplication by 2.
 ...                X25519 test vectors                                163   164 - special case for E in multiplication by 2.
[OK]                X25519 test vectors                                163   164 - special case for E in multiplication by 2.
 ...                X25519 test vectors                                164   165 - D = 0 in multiplication by 2.
[OK]                X25519 test vectors                                164   165 - D = 0 in multiplication by 2.
 ...                X25519 test vectors                                165   166 - D = 0 in multiplication by 2.
[OK]                X25519 test vectors                                165   166 - D = 0 in multiplication by 2.
 ...                X25519 test vectors                                166   167 - special case for DA - CB in multiplication by 2.
[OK]                X25519 test vectors                                166   167 - special case for DA - CB in multiplication by 2.
 ...                X25519 test vectors                                167   168 - special case for DA - CB in multiplication by 2.
[OK]                X25519 test vectors                                167   168 - special case for DA - CB in multiplication by 2.
 ...                X25519 test vectors                                168   169 - special case for DA - CB in multiplication by 2.
[OK]                X25519 test vectors                                168   169 - special case for DA - CB in multiplication by 2.
 ...                X25519 test vectors                                169   170 - special case for DA - CB in multiplication by 2.
[OK]                X25519 test vectors                                169   170 - special case for DA - CB in multiplication by 2.
 ...                X25519 test vectors                                170   171 - special case for DA in multiplication by 2.
[OK]                X25519 test vectors                                170   171 - special case for DA in multiplication by 2.
 ...                X25519 test vectors                                171   172 - special case for DA in multiplication by 2.
[OK]                X25519 test vectors                                171   172 - special case for DA in multiplication by 2.
 ...                X25519 test vectors                                172   173 - special case for DA in multiplication by 2.
[OK]                X25519 test vectors                                172   173 - special case for DA in multiplication by 2.
 ...                X25519 test vectors                                173   174 - special case for DA in multiplication by 2.
[OK]                X25519 test vectors                                173   174 - special case for DA in multiplication by 2.
 ...                X25519 test vectors                                174   175 - special case for x_2 in multiplication by 2.
[OK]                X25519 test vectors                                174   175 - special case for x_2 in multiplication by 2.
 ...                X25519 test vectors                                175   176 - special case for x_2 in multiplication by 2.
[OK]                X25519 test vectors                                175   176 - special case for x_2 in multiplication by 2.
 ...                X25519 test vectors                                176   177 - special case for x_2 in multiplication by 2.
[OK]                X25519 test vectors                                176   177 - special case for x_2 in multiplication by 2.
 ...                X25519 test vectors                                177   178 - special case for x_2 in multiplication by 2.
[OK]                X25519 test vectors                                177   178 - special case for x_2 in multiplication by 2.
 ...                X25519 test vectors                                178   179 - special case for x_2 in multiplication by 2.
[OK]                X25519 test vectors                                178   179 - special case for x_2 in multiplication by 2.
 ...                X25519 test vectors                                179   180 - special case for x_2 in multiplication by 2.
[OK]                X25519 test vectors                                179   180 - special case for x_2 in multiplication by 2.
 ...                X25519 test vectors                                180   181 - special case for AA in multiplication by 2.
[OK]                X25519 test vectors                                180   181 - special case for AA in multiplication by 2.
 ...                X25519 test vectors                                181   182 - special case for AA in multiplication by 2.
[OK]                X25519 test vectors                                181   182 - special case for AA in multiplication by 2.
 ...                X25519 test vectors                                182   183 - special case for AA in multiplication by 2.
[OK]                X25519 test vectors                                182   183 - special case for AA in multiplication by 2.
 ...                X25519 test vectors                                183   184 - special case for AA in multiplication by 2.
[OK]                X25519 test vectors                                183   184 - special case for AA in multiplication by 2.
 ...                X25519 test vectors                                184   185 - special case for BB in multiplication by 2.
[OK]                X25519 test vectors                                184   185 - special case for BB in multiplication by 2.
 ...                X25519 test vectors                                185   186 - special case for BB in multiplication by 2.
[OK]                X25519 test vectors                                185   186 - special case for BB in multiplication by 2.
 ...                X25519 test vectors                                186   187 - special case for BB in multiplication by 2.
[OK]                X25519 test vectors                                186   187 - special case for BB in multiplication by 2.
 ...                X25519 test vectors                                187   188 - special case for BB in multiplication by 2.
[OK]                X25519 test vectors                                187   188 - special case for BB in multiplication by 2.
 ...                X25519 test vectors                                188   189 - special case for D in multiplication by 2.
[OK]                X25519 test vectors                                188   189 - special case for D in multiplication by 2.
 ...                X25519 test vectors                                189   190 - special case for D in multiplication by 2.
[OK]                X25519 test vectors                                189   190 - special case for D in multiplication by 2.
 ...                X25519 test vectors                                190   191 - special case for D in multiplication by 2.
[OK]                X25519 test vectors                                190   191 - special case for D in multiplication by 2.
 ...                X25519 test vectors                                191   192 - special case for D in multiplication by 2.
[OK]                X25519 test vectors                                191   192 - special case for D in multiplication by 2.
 ...                X25519 test vectors                                192   193 - special case for D in multiplication by 2.
[OK]                X25519 test vectors                                192   193 - special case for D in multiplication by 2.
 ...                X25519 test vectors                                193   194 - special case for D in multiplication by 2.
[OK]                X25519 test vectors                                193   194 - special case for D in multiplication by 2.
 ...                X25519 test vectors                                194   195 - special case for DA + CB in multiplication by 2.
[OK]                X25519 test vectors                                194   195 - special case for DA + CB in multiplication by 2.
 ...                X25519 test vectors                                195   196 - special case for DA + CB in multiplication by 2.
[OK]                X25519 test vectors                                195   196 - special case for DA + CB in multiplication by 2.
 ...                X25519 test vectors                                196   197 - special case for DA + CB in multiplication by 2.
[OK]                X25519 test vectors                                196   197 - special case for DA + CB in multiplication by 2.
 ...                X25519 test vectors                                197   198 - special case for DA + CB in multiplication by 2.
[OK]                X25519 test vectors                                197   198 - special case for DA + CB in multiplication by 2.
 ...                X25519 test vectors                                198   199 - special case for DA + CB in multiplication by 2.
[OK]                X25519 test vectors                                198   199 - special case for DA + CB in multiplication by 2.
 ...                X25519 test vectors                                199   200 - special case for DA + CB in multiplication by 2.
[OK]                X25519 test vectors                                199   200 - special case for DA + CB in multiplication by 2.
 ...                X25519 test vectors                                200   201 - special case for DA + CB in multiplication by 2.
[OK]                X25519 test vectors                                200   201 - special case for DA + CB in multiplication by 2.
 ...                X25519 test vectors                                201   202 - special case for z_2 in multiplication by 2.
[OK]                X25519 test vectors                                201   202 - special case for z_2 in multiplication by 2.
 ...                X25519 test vectors                                202   203 - special case for z_2 in multiplication by 2.
[OK]                X25519 test vectors                                202   203 - special case for z_2 in multiplication by 2.
 ...                X25519 test vectors                                203   204 - special case for z_2 in multiplication by 2.
[OK]                X25519 test vectors                                203   204 - special case for z_2 in multiplication by 2.
 ...                X25519 test vectors                                204   205 - special case for z_2 in multiplication by 2.
[OK]                X25519 test vectors                                204   205 - special case for z_2 in multiplication by 2.
 ...                X25519 test vectors                                205   206 - special case for z_2 in multiplication by 2.
[OK]                X25519 test vectors                                205   206 - special case for z_2 in multiplication by 2.
 ...                X25519 test vectors                                206   207 - special case for z_2 in multiplication by 2.
[OK]                X25519 test vectors                                206   207 - special case for z_2 in multiplication by 2.
 ...                X25519 test vectors                                207   208 - special case for z_2 in multiplication by 2.
[OK]                X25519 test vectors                                207   208 - special case for z_2 in multiplication by 2.
 ...                X25519 test vectors                                208   209 - special case for z_2 in multiplication by 2.
[OK]                X25519 test vectors                                208   209 - special case for z_2 in multiplication by 2.
 ...                X25519 test vectors                                209   210 - special case for A in multiplication by 2.
[OK]                X25519 test vectors                                209   210 - special case for A in multiplication by 2.
 ...                X25519 test vectors                                210   211 - special case for A in multiplication by 2.
[OK]                X25519 test vectors                                210   211 - special case for A in multiplication by 2.
 ...                X25519 test vectors                                211   212 - special case for A in multiplication by 2.
[OK]                X25519 test vectors                                211   212 - special case for A in multiplication by 2.
 ...                X25519 test vectors                                212   213 - special case for A in multiplication by 2.
[OK]                X25519 test vectors                                212   213 - special case for A in multiplication by 2.
 ...                X25519 test vectors                                213   214 - special case for A in multiplication by 2.
[OK]                X25519 test vectors                                213   214 - special case for A in multiplication by 2.
 ...                X25519 test vectors                                214   215 - special case for A in multiplication by 2.
[OK]                X25519 test vectors                                214   215 - special case for A in multiplication by 2.
 ...                X25519 test vectors                                215   216 - special case for B in multiplication by 2.
[OK]                X25519 test vectors                                215   216 - special case for B in multiplication by 2.
 ...                X25519 test vectors                                216   217 - special case for B in multiplication by 2.
[OK]                X25519 test vectors                                216   217 - special case for B in multiplication by 2.
 ...                X25519 test vectors                                217   218 - special case for B in multiplication by 2.
[OK]                X25519 test vectors                                217   218 - special case for B in multiplication by 2.
 ...                X25519 test vectors                                218   219 - special case for B in multiplication by 2.
[OK]                X25519 test vectors                                218   219 - special case for B in multiplication by 2.
 ...                X25519 test vectors                                219   220 - special case for B in multiplication by 2.
[OK]                X25519 test vectors                                219   220 - special case for B in multiplication by 2.
 ...                X25519 test vectors                                220   221 - special case for B in multiplication by 2.
[OK]                X25519 test vectors                                220   221 - special case for B in multiplication by 2.
 ...                X25519 test vectors                                221   222 - special case for C in multiplication by 2.
[OK]                X25519 test vectors                                221   222 - special case for C in multiplication by 2.
 ...                X25519 test vectors                                222   223 - special case for C in multiplication by 2.
[OK]                X25519 test vectors                                222   223 - special case for C in multiplication by 2.
 ...                X25519 test vectors                                223   224 - special case for C in multiplication by 2.
[OK]                X25519 test vectors                                223   224 - special case for C in multiplication by 2.
 ...                X25519 test vectors                                224   225 - special case for C in multiplication by 2.
[OK]                X25519 test vectors                                224   225 - special case for C in multiplication by 2.
 ...                X25519 test vectors                                225   226 - special case for CB in multiplication by 2.
[OK]                X25519 test vectors                                225   226 - special case for CB in multiplication by 2.
 ...                X25519 test vectors                                226   227 - special case for CB in multiplication by 2.
[OK]                X25519 test vectors                                226   227 - special case for CB in multiplication by 2.
 ...                X25519 test vectors                                227   228 - special case for CB in multiplication by 2.
[OK]                X25519 test vectors                                227   228 - special case for CB in multiplication by 2.
 ...                X25519 test vectors                                228   229 - special case for x_2 in multiplication by 3.
[OK]                X25519 test vectors                                228   229 - special case for x_2 in multiplication by 3.
 ...                X25519 test vectors                                229   230 - special case for x_2 in multiplication by 3.
[OK]                X25519 test vectors                                229   230 - special case for x_2 in multiplication by 3.
 ...                X25519 test vectors                                230   231 - special case for x_2 in multiplication by 3.
[OK]                X25519 test vectors                                230   231 - special case for x_2 in multiplication by 3.
 ...                X25519 test vectors                                231   232 - special case for x_2 in multiplication by 3.
[OK]                X25519 test vectors                                231   232 - special case for x_2 in multiplication by 3.
 ...                X25519 test vectors                                232   233 - special case for x_2 in multiplication by 3.
[OK]                X25519 test vectors                                232   233 - special case for x_2 in multiplication by 3.
 ...                X25519 test vectors                                233   234 - special case for x_2 in multiplication by 3.
[OK]                X25519 test vectors                                233   234 - special case for x_2 in multiplication by 3.
 ...                X25519 test vectors                                234   235 - special case for z_2 in multiplication by 3.
[OK]                X25519 test vectors                                234   235 - special case for z_2 in multiplication by 3.
 ...                X25519 test vectors                                235   236 - special case for z_2 in multiplication by 3.
[OK]                X25519 test vectors                                235   236 - special case for z_2 in multiplication by 3.
 ...                X25519 test vectors                                236   237 - special case for z_2 in multiplication by 3.
[OK]                X25519 test vectors                                236   237 - special case for z_2 in multiplication by 3.
 ...                X25519 test vectors                                237   238 - special case for DA - CB in multiplication by 3.
[OK]                X25519 test vectors                                237   238 - special case for DA - CB in multiplication by 3.
 ...                X25519 test vectors                                238   239 - special case for DA - CB in multiplication by 3.
[OK]                X25519 test vectors                                238   239 - special case for DA - CB in multiplication by 3.
 ...                X25519 test vectors                                239   240 - special case for BB in multiplication by 3.
[OK]                X25519 test vectors                                239   240 - special case for BB in multiplication by 3.
 ...                X25519 test vectors                                240   241 - special case for BB in multiplication by 3.
[OK]                X25519 test vectors                                240   241 - special case for BB in multiplication by 3.
 ...                X25519 test vectors                                241   242 - special case for BB in multiplication by 3.
[OK]                X25519 test vectors                                241   242 - special case for BB in multiplication by 3.
 ...                X25519 test vectors                                242   243 - special case for BB in multiplication by 3.
[OK]                X25519 test vectors                                242   243 - special case for BB in multiplication by 3.
 ...                X25519 test vectors                                243   244 - special case for E in multiplication by 3.
[OK]                X25519 test vectors                                243   244 - special case for E in multiplication by 3.
 ...                X25519 test vectors                                244   245 - special case for E in multiplication by 3.
[OK]                X25519 test vectors                                244   245 - special case for E in multiplication by 3.
 ...                X25519 test vectors                                245   246 - special case for E in multiplication by 3.
[OK]                X25519 test vectors                                245   246 - special case for E in multiplication by 3.
 ...                X25519 test vectors                                246   247 - special case for E in multiplication by 3.
[OK]                X25519 test vectors                                246   247 - special case for E in multiplication by 3.
 ...                X25519 test vectors                                247   248 - special case for E in multiplication by 3.
[OK]                X25519 test vectors                                247   248 - special case for E in multiplication by 3.
 ...                X25519 test vectors                                248   249 - special case for E in multiplication by 3.
[OK]                X25519 test vectors                                248   249 - special case for E in multiplication by 3.
 ...                X25519 test vectors                                249   250 - special case for E in multiplication by 3.
[OK]                X25519 test vectors                                249   250 - special case for E in multiplication by 3.
 ...                X25519 test vectors                                250   251 - special case for AA in multiplication by 3.
[OK]                X25519 test vectors                                250   251 - special case for AA in multiplication by 3.
 ...                X25519 test vectors                                251   252 - special case for AA in multiplication by 3.
[OK]                X25519 test vectors                                251   252 - special case for AA in multiplication by 3.
 ...                X25519 test vectors                                252   253 - special case for AA in multiplication by 3.
[OK]                X25519 test vectors                                252   253 - special case for AA in multiplication by 3.
 ...                X25519 test vectors                                253   254 - special case for AA in multiplication by 3.
[OK]                X25519 test vectors                                253   254 - special case for AA in multiplication by 3.
 ...                X25519 test vectors                                254   255 - special case for AA in multiplication by 3.
[OK]                X25519 test vectors                                254   255 - special case for AA in multiplication by 3.
 ...                X25519 test vectors                                255   256 - special case for AA in multiplication by 3.
[OK]                X25519 test vectors                                255   256 - special case for AA in multiplication by 3.
 ...                X25519 test vectors                                256   257 - special case for AA in multiplication by 3.
[OK]                X25519 test vectors                                256   257 - special case for AA in multiplication by 3.
 ...                X25519 test vectors                                257   258 - special case for AA in multiplication by 3.
[OK]                X25519 test vectors                                257   258 - special case for AA in multiplication by 3.
 ...                X25519 test vectors                                258   259 - special case for D in multiplication by 4.
[OK]                X25519 test vectors                                258   259 - special case for D in multiplication by 4.
 ...                X25519 test vectors                                259   260 - special case for D in multiplication by 4.
[OK]                X25519 test vectors                                259   260 - special case for D in multiplication by 4.
 ...                X25519 test vectors                                260   261 - special case for D in multiplication by 4.
[OK]                X25519 test vectors                                260   261 - special case for D in multiplication by 4.
 ...                X25519 test vectors                                261   262 - special case for D in multiplication by 4.
[OK]                X25519 test vectors                                261   262 - special case for D in multiplication by 4.
 ...                X25519 test vectors                                262   263 - special case for D in multiplication by 4.
[OK]                X25519 test vectors                                262   263 - special case for D in multiplication by 4.
 ...                X25519 test vectors                                263   264 - special case for D in multiplication by 4.
[OK]                X25519 test vectors                                263   264 - special case for D in multiplication by 4.
 ...                X25519 test vectors                                264   265 - special case for D in multiplication by 4.
[OK]                X25519 test vectors                                264   265 - special case for D in multiplication by 4.
 ...                X25519 test vectors                                265   266 - special case for D in multiplication by 4.
[OK]                X25519 test vectors                                265   266 - special case for D in multiplication by 4.
 ...                X25519 test vectors                                266   267 - special case for E in multiplication by 4.
[OK]                X25519 test vectors                                266   267 - special case for E in multiplication by 4.
 ...                X25519 test vectors                                267   268 - special case for E in multiplication by 4.
[OK]                X25519 test vectors                                267   268 - special case for E in multiplication by 4.
 ...                X25519 test vectors                                268   269 - special case for E in multiplication by 4.
[OK]                X25519 test vectors                                268   269 - special case for E in multiplication by 4.
 ...                X25519 test vectors                                269   270 - special case for E in multiplication by 4.
[OK]                X25519 test vectors                                269   270 - special case for E in multiplication by 4.
 ...                X25519 test vectors                                270   271 - special case for B in multiplication by 4.
[OK]                X25519 test vectors                                270   271 - special case for B in multiplication by 4.
 ...                X25519 test vectors                                271   272 - special case for B in multiplication by 4.
[OK]                X25519 test vectors                                271   272 - special case for B in multiplication by 4.
 ...                X25519 test vectors                                272   273 - special case for B in multiplication by 4.
[OK]                X25519 test vectors                                272   273 - special case for B in multiplication by 4.
 ...                X25519 test vectors                                273   274 - special case for B in multiplication by 4.
[OK]                X25519 test vectors                                273   274 - special case for B in multiplication by 4.
 ...                X25519 test vectors                                274   275 - special case for B in multiplication by 4.
[OK]                X25519 test vectors                                274   275 - special case for B in multiplication by 4.
 ...                X25519 test vectors                                275   276 - special case for B in multiplication by 4.
[OK]                X25519 test vectors                                275   276 - special case for B in multiplication by 4.
 ...                X25519 test vectors                                276   277 - special case for B in multiplication by 4.
[OK]                X25519 test vectors                                276   277 - special case for B in multiplication by 4.
 ...                X25519 test vectors                                277   278 - special case for B in multiplication by 4.
[OK]                X25519 test vectors                                277   278 - special case for B in multiplication by 4.
 ...                X25519 test vectors                                278   279 - special case for BB in multiplication by 4.
[OK]                X25519 test vectors                                278   279 - special case for BB in multiplication by 4.
 ...                X25519 test vectors                                279   280 - special case for BB in multiplication by 4.
[OK]                X25519 test vectors                                279   280 - special case for BB in multiplication by 4.
 ...                X25519 test vectors                                280   281 - special case for BB in multiplication by 4.
[OK]                X25519 test vectors                                280   281 - special case for BB in multiplication by 4.
 ...                X25519 test vectors                                281   282 - special case for BB in multiplication by 4.
[OK]                X25519 test vectors                                281   282 - special case for BB in multiplication by 4.
 ...                X25519 test vectors                                282   283 - special case for BB in multiplication by 4.
[OK]                X25519 test vectors                                282   283 - special case for BB in multiplication by 4.
 ...                X25519 test vectors                                283   284 - special case for x_2 in multiplication by 4.
[OK]                X25519 test vectors                                283   284 - special case for x_2 in multiplication by 4.
 ...                X25519 test vectors                                284   285 - special case for x_2 in multiplication by 4.
[OK]                X25519 test vectors                                284   285 - special case for x_2 in multiplication by 4.
 ...                X25519 test vectors                                285   286 - special case for x_2 in multiplication by 4.
[OK]                X25519 test vectors                                285   286 - special case for x_2 in multiplication by 4.
 ...                X25519 test vectors                                286   287 - special case for x_2 in multiplication by 4.
[OK]                X25519 test vectors                                286   287 - special case for x_2 in multiplication by 4.
 ...                X25519 test vectors                                287   288 - special case for x_2 in multiplication by 4.
[OK]                X25519 test vectors                                287   288 - special case for x_2 in multiplication by 4.
 ...                X25519 test vectors                                288   289 - special case for x_2 in multiplication by 4.
[OK]                X25519 test vectors                                288   289 - special case for x_2 in multiplication by 4.
 ...                X25519 test vectors                                289   290 - special case for x_2 in multiplication by 4.
[OK]                X25519 test vectors                                289   290 - special case for x_2 in multiplication by 4.
 ...                X25519 test vectors                                290   291 - special case for x_2 in multiplication by 4.
[OK]                X25519 test vectors                                290   291 - special case for x_2 in multiplication by 4.
 ...                X25519 test vectors                                291   292 - special case for x_2 in multiplication by 4.
[OK]                X25519 test vectors                                291   292 - special case for x_2 in multiplication by 4.
 ...                X25519 test vectors                                292   293 - special case for x_2 in multiplication by 4.
[OK]                X25519 test vectors                                292   293 - special case for x_2 in multiplication by 4.
 ...                X25519 test vectors                                293   294 - special case for DA + CB in multiplication by 4.
[OK]                X25519 test vectors                                293   294 - special case for DA + CB in multiplication by 4.
 ...                X25519 test vectors                                294   295 - special case for DA + CB in multiplication by 4.
[OK]                X25519 test vectors                                294   295 - special case for DA + CB in multiplication by 4.
 ...                X25519 test vectors                                295   296 - special case for DA + CB in multiplication by 4.
[OK]                X25519 test vectors                                295   296 - special case for DA + CB in multiplication by 4.
 ...                X25519 test vectors                                296   297 - special case for A in multiplication by 4.
[OK]                X25519 test vectors                                296   297 - special case for A in multiplication by 4.
 ...                X25519 test vectors                                297   298 - special case for A in multiplication by 4.
[OK]                X25519 test vectors                                297   298 - special case for A in multiplication by 4.
 ...                X25519 test vectors                                298   299 - special case for A in multiplication by 4.
[OK]                X25519 test vectors                                298   299 - special case for A in multiplication by 4.
 ...                X25519 test vectors                                299   300 - special case for A in multiplication by 4.
[OK]                X25519 test vectors                                299   300 - special case for A in multiplication by 4.
 ...                X25519 test vectors                                300   301 - special case for DA - CB in multiplication by 4.
[OK]                X25519 test vectors                                300   301 - special case for DA - CB in multiplication by 4.
 ...                X25519 test vectors                                301   302 - special case for DA - CB in multiplication by 4.
[OK]                X25519 test vectors                                301   302 - special case for DA - CB in multiplication by 4.
 ...                X25519 test vectors                                302   303 - special case for DA - CB in multiplication by 4.
[OK]                X25519 test vectors                                302   303 - special case for DA - CB in multiplication by 4.
 ...                X25519 test vectors                                303   304 - special case for DA - CB in multiplication by 4.
[OK]                X25519 test vectors                                303   304 - special case for DA - CB in multiplication by 4.
 ...                X25519 test vectors                                304   305 - special case for DA - CB in multiplication by 4.
[OK]                X25519 test vectors                                304   305 - special case for DA - CB in multiplication by 4.
 ...                X25519 test vectors                                305   306 - special case for C in multiplication by 4.
[OK]                X25519 test vectors                                305   306 - special case for C in multiplication by 4.
 ...                X25519 test vectors                                306   307 - special case for C in multiplication by 4.
[OK]                X25519 test vectors                                306   307 - special case for C in multiplication by 4.
 ...                X25519 test vectors                                307   308 - special case for C in multiplication by 4.
[OK]                X25519 test vectors                                307   308 - special case for C in multiplication by 4.
 ...                X25519 test vectors                                308   309 - special case for C in multiplication by 4.
[OK]                X25519 test vectors                                308   309 - special case for C in multiplication by 4.
 ...                X25519 test vectors                                309   310 - special case for z_2 in multiplication by 4.
[OK]                X25519 test vectors                                309   310 - special case for z_2 in multiplication by 4.
 ...                X25519 test vectors                                310   311 - special case for z_2 in multiplication by 4.
[OK]                X25519 test vectors                                310   311 - special case for z_2 in multiplication by 4.
 ...                X25519 test vectors                                311   312 - special case for z_2 in multiplication by 4.
[OK]                X25519 test vectors                                311   312 - special case for z_2 in multiplication by 4.
 ...                X25519 test vectors                                312   313 - special case for CB in multiplication by 4.
[OK]                X25519 test vectors                                312   313 - special case for CB in multiplication by 4.
 ...                X25519 test vectors                                313   314 - special case for CB in multiplication by 4.
[OK]                X25519 test vectors                                313   314 - special case for CB in multiplication by 4.
 ...                X25519 test vectors                                314   315 - special case for CB in multiplication by 4.
[OK]                X25519 test vectors                                314   315 - special case for CB in multiplication by 4.
 ...                X25519 test vectors                                315   316 - special case for CB in multiplication by 4.
[OK]                X25519 test vectors                                315   316 - special case for CB in multiplication by 4.
 ...                X25519 test vectors                                316   317 - special case for AA in multiplication by 4.
[OK]                X25519 test vectors                                316   317 - special case for AA in multiplication by 4.
 ...                X25519 test vectors                                317   318 - special case for AA in multiplication by 4.
[OK]                X25519 test vectors                                317   318 - special case for AA in multiplication by 4.
 ...                X25519 test vectors                                318   319 - special case for AA in multiplication by 4.
[OK]                X25519 test vectors                                318   319 - special case for AA in multiplication by 4.
 ...                X25519 test vectors                                319   320 - special case for AA in multiplication by 4.
[OK]                X25519 test vectors                                319   320 - special case for AA in multiplication by 4.
 ...                X25519 test vectors                                320   321 - special case for AA in multiplication by 4.
[OK]                X25519 test vectors                                320   321 - special case for AA in multiplication by 4.
 ...                X25519 test vectors                                321   322 - special case for AA in multiplication by 4.
[OK]                X25519 test vectors                                321   322 - special case for AA in multiplication by 4.
 ...                X25519 test vectors                                322   323 - special case for AA in multiplication by 4.
[OK]                X25519 test vectors                                322   323 - special case for AA in multiplication by 4.
 ...                X25519 test vectors                                323   324 - special case for DA in multiplication by 4.
[OK]                X25519 test vectors                                323   324 - special case for DA in multiplication by 4.
 ...                X25519 test vectors                                324   325 - special case for z_2 in multiplication by 5.
[OK]                X25519 test vectors                                324   325 - special case for z_2 in multiplication by 5.
 ...                X25519 test vectors                                325   326 - special case for z_2 in multiplication by 5.
[OK]                X25519 test vectors                                325   326 - special case for z_2 in multiplication by 5.
 ...                X25519 test vectors                                326   327 - special case for z_2 in multiplication by 5.
[OK]                X25519 test vectors                                326   327 - special case for z_2 in multiplication by 5.
 ...                X25519 test vectors                                327   328 - special case for z_2 in multiplication by 5.
[OK]                X25519 test vectors                                327   328 - special case for z_2 in multiplication by 5.
 ...                X25519 test vectors                                328   329 - special case for z_2 in multiplication by 5.
[OK]                X25519 test vectors                                328   329 - special case for z_2 in multiplication by 5.
 ...                X25519 test vectors                                329   330 - special case for z_2 in multiplication by 5.
[OK]                X25519 test vectors                                329   330 - special case for z_2 in multiplication by 5.
 ...                X25519 test vectors                                330   331 - special case for E in multiplication by 5.
[OK]                X25519 test vectors                                330   331 - special case for E in multiplication by 5.
 ...                X25519 test vectors                                331   332 - special case for E in multiplication by 5.
[OK]                X25519 test vectors                                331   332 - special case for E in multiplication by 5.
 ...                X25519 test vectors                                332   333 - special case for E in multiplication by 5.
[OK]                X25519 test vectors                                332   333 - special case for E in multiplication by 5.
 ...                X25519 test vectors                                333   334 - special case for E in multiplication by 5.
[OK]                X25519 test vectors                                333   334 - special case for E in multiplication by 5.
 ...                X25519 test vectors                                334   335 - special case for E in multiplication by 5.
[OK]                X25519 test vectors                                334   335 - special case for E in multiplication by 5.
 ...                X25519 test vectors                                335   336 - special case for AA in multiplication by 5.
[OK]                X25519 test vectors                                335   336 - special case for AA in multiplication by 5.
 ...                X25519 test vectors                                336   337 - special case for AA in multiplication by 5.
[OK]                X25519 test vectors                                336   337 - special case for AA in multiplication by 5.
 ...                X25519 test vectors                                337   338 - special case for AA in multiplication by 5.
[OK]                X25519 test vectors                                337   338 - special case for AA in multiplication by 5.
 ...                X25519 test vectors                                338   339 - special case for AA in multiplication by 5.
[OK]                X25519 test vectors                                338   339 - special case for AA in multiplication by 5.
 ...                X25519 test vectors                                339   340 - special case for DA - CB in multiplication by 5.
[OK]                X25519 test vectors                                339   340 - special case for DA - CB in multiplication by 5.
 ...                X25519 test vectors                                340   341 - special case for DA - CB in multiplication by 5.
[OK]                X25519 test vectors                                340   341 - special case for DA - CB in multiplication by 5.
 ...                X25519 test vectors                                341   342 - special case for DA - CB in multiplication by 5.
[OK]                X25519 test vectors                                341   342 - special case for DA - CB in multiplication by 5.
 ...                X25519 test vectors                                342   343 - special case for BB in multiplication by 5.
[OK]                X25519 test vectors                                342   343 - special case for BB in multiplication by 5.
 ...                X25519 test vectors                                343   344 - special case for BB in multiplication by 5.
[OK]                X25519 test vectors                                343   344 - special case for BB in multiplication by 5.
 ...                X25519 test vectors                                344   345 - special case for BB in multiplication by 5.
[OK]                X25519 test vectors                                344   345 - special case for BB in multiplication by 5.
 ...                X25519 test vectors                                345   346 - special case for x_2 in multiplication by 5.
[OK]                X25519 test vectors                                345   346 - special case for x_2 in multiplication by 5.
 ...                X25519 test vectors                                346   347 - special case for x_2 in multiplication by 5.
[OK]                X25519 test vectors                                346   347 - special case for x_2 in multiplication by 5.
 ...                X25519 test vectors                                347   348 - special case for x_2 in multiplication by 5.
[OK]                X25519 test vectors                                347   348 - special case for x_2 in multiplication by 5.
 ...                X25519 test vectors                                348   349 - special case for C in multiplication by 6.
[OK]                X25519 test vectors                                348   349 - special case for C in multiplication by 6.
 ...                X25519 test vectors                                349   350 - special case for C in multiplication by 6.
[OK]                X25519 test vectors                                349   350 - special case for C in multiplication by 6.
 ...                X25519 test vectors                                350   351 - special case for C in multiplication by 6.
[OK]                X25519 test vectors                                350   351 - special case for C in multiplication by 6.
 ...                X25519 test vectors                                351   352 - special case for C in multiplication by 6.
[OK]                X25519 test vectors                                351   352 - special case for C in multiplication by 6.
 ...                X25519 test vectors                                352   353 - special case for C in multiplication by 6.
[OK]                X25519 test vectors                                352   353 - special case for C in multiplication by 6.
 ...                X25519 test vectors                                353   354 - special case for CB in multiplication by 6.
[OK]                X25519 test vectors                                353   354 - special case for CB in multiplication by 6.
 ...                X25519 test vectors                                354   355 - special case for CB in multiplication by 6.
[OK]                X25519 test vectors                                354   355 - special case for CB in multiplication by 6.
 ...                X25519 test vectors                                355   356 - special case for CB in multiplication by 6.
[OK]                X25519 test vectors                                355   356 - special case for CB in multiplication by 6.
 ...                X25519 test vectors                                356   357 - special case for CB in multiplication by 6.
[OK]                X25519 test vectors                                356   357 - special case for CB in multiplication by 6.
 ...                X25519 test vectors                                357   358 - special case for CB in multiplication by 6.
[OK]                X25519 test vectors                                357   358 - special case for CB in multiplication by 6.
 ...                X25519 test vectors                                358   359 - special case for CB in multiplication by 6.
[OK]                X25519 test vectors                                358   359 - special case for CB in multiplication by 6.
 ...                X25519 test vectors                                359   360 - special case for CB in multiplication by 6.
[OK]                X25519 test vectors                                359   360 - special case for CB in multiplication by 6.
 ...                X25519 test vectors                                360   361 - special case for CB in multiplication by 6.
[OK]                X25519 test vectors                                360   361 - special case for CB in multiplication by 6.
 ...                X25519 test vectors                                361   362 - special case for x_2 in multiplication by 6.
[OK]                X25519 test vectors                                361   362 - special case for x_2 in multiplication by 6.
 ...                X25519 test vectors                                362   363 - special case for x_2 in multiplication by 6.
[OK]                X25519 test vectors                                362   363 - special case for x_2 in multiplication by 6.
 ...                X25519 test vectors                                363   364 - special case for x_2 in multiplication by 6.
[OK]                X25519 test vectors                                363   364 - special case for x_2 in multiplication by 6.
 ...                X25519 test vectors                                364   365 - special case for x_2 in multiplication by 6.
[OK]                X25519 test vectors                                364   365 - special case for x_2 in multiplication by 6.
 ...                X25519 test vectors                                365   366 - special case for x_2 in multiplication by 6.
[OK]                X25519 test vectors                                365   366 - special case for x_2 in multiplication by 6.
 ...                X25519 test vectors                                366   367 - special case for x_2 in multiplication by 6.
[OK]                X25519 test vectors                                366   367 - special case for x_2 in multiplication by 6.
 ...                X25519 test vectors                                367   368 - special case for x_2 in multiplication by 6.
[OK]                X25519 test vectors                                367   368 - special case for x_2 in multiplication by 6.
 ...                X25519 test vectors                                368   369 - special case for DA - CB in multiplication by 6.
[OK]                X25519 test vectors                                368   369 - special case for DA - CB in multiplication by 6.
 ...                X25519 test vectors                                369   370 - special case for DA - CB in multiplication by 6.
[OK]                X25519 test vectors                                369   370 - special case for DA - CB in multiplication by 6.
 ...                X25519 test vectors                                370   371 - special case for DA - CB in multiplication by 6.
[OK]                X25519 test vectors                                370   371 - special case for DA - CB in multiplication by 6.
 ...                X25519 test vectors                                371   372 - special case for DA - CB in multiplication by 6.
[OK]                X25519 test vectors                                371   372 - special case for DA - CB in multiplication by 6.
 ...                X25519 test vectors                                372   373 - special case for DA - CB in multiplication by 6.
[OK]                X25519 test vectors                                372   373 - special case for DA - CB in multiplication by 6.
 ...                X25519 test vectors                                373   374 - special case for DA + CB in multiplication by 6.
[OK]                X25519 test vectors                                373   374 - special case for DA + CB in multiplication by 6.
 ...                X25519 test vectors                                374   375 - special case for DA + CB in multiplication by 6.
[OK]                X25519 test vectors                                374   375 - special case for DA + CB in multiplication by 6.
 ...                X25519 test vectors                                375   376 - special case for DA + CB in multiplication by 6.
[OK]                X25519 test vectors                                375   376 - special case for DA + CB in multiplication by 6.
 ...                X25519 test vectors                                376   377 - special case for DA + CB in multiplication by 6.
[OK]                X25519 test vectors                                376   377 - special case for DA + CB in multiplication by 6.
 ...                X25519 test vectors                                377   378 - special case for DA + CB in multiplication by 6.
[OK]                X25519 test vectors                                377   378 - special case for DA + CB in multiplication by 6.
 ...                X25519 test vectors                                378   379 - special case for DA + CB in multiplication by 6.
[OK]                X25519 test vectors                                378   379 - special case for DA + CB in multiplication by 6.
 ...                X25519 test vectors                                379   380 - special case for DA + CB in multiplication by 6.
[OK]                X25519 test vectors                                379   380 - special case for DA + CB in multiplication by 6.
 ...                X25519 test vectors                                380   381 - special case for z_2 in multiplication by 6.
[OK]                X25519 test vectors                                380   381 - special case for z_2 in multiplication by 6.
 ...                X25519 test vectors                                381   382 - special case for z_2 in multiplication by 6.
[OK]                X25519 test vectors                                381   382 - special case for z_2 in multiplication by 6.
 ...                X25519 test vectors                                382   383 - special case for z_2 in multiplication by 6.
[OK]                X25519 test vectors                                382   383 - special case for z_2 in multiplication by 6.
 ...                X25519 test vectors                                383   384 - special case for z_2 in multiplication by 6.
[OK]                X25519 test vectors                                383   384 - special case for z_2 in multiplication by 6.
 ...                X25519 test vectors                                384   385 - special case for D in multiplication by 6.
[OK]                X25519 test vectors                                384   385 - special case for D in multiplication by 6.
 ...                X25519 test vectors                                385   386 - special case for D in multiplication by 6.
[OK]                X25519 test vectors                                385   386 - special case for D in multiplication by 6.
 ...                X25519 test vectors                                386   387 - special case for D in multiplication by 6.
[OK]                X25519 test vectors                                386   387 - special case for D in multiplication by 6.
 ...                X25519 test vectors                                387   388 - special case for D in multiplication by 6.
[OK]                X25519 test vectors                                387   388 - special case for D in multiplication by 6.
 ...                X25519 test vectors                                388   389 - special case for DA in multiplication by 6.
[OK]                X25519 test vectors                                388   389 - special case for DA in multiplication by 6.
 ...                X25519 test vectors                                389   390 - special case for DA in multiplication by 6.
[OK]                X25519 test vectors                                389   390 - special case for DA in multiplication by 6.
 ...                X25519 test vectors                                390   391 - special case for DA in multiplication by 6.
[OK]                X25519 test vectors                                390   391 - special case for DA in multiplication by 6.
 ...                X25519 test vectors                                391   392 - special case for DA in multiplication by 6.
[OK]                X25519 test vectors                                391   392 - special case for DA in multiplication by 6.
 ...                X25519 test vectors                                392   393 - special case for z_2 in multiplication by 7.
[OK]                X25519 test vectors                                392   393 - special case for z_2 in multiplication by 7.
 ...                X25519 test vectors                                393   394 - special case for z_2 in multiplication by 7.
[OK]                X25519 test vectors                                393   394 - special case for z_2 in multiplication by 7.
 ...                X25519 test vectors                                394   395 - special case for z_2 in multiplication by 7.
[OK]                X25519 test vectors                                394   395 - special case for z_2 in multiplication by 7.
 ...                X25519 test vectors                                395   396 - special case for z_2 in multiplication by 7.
[OK]                X25519 test vectors                                395   396 - special case for z_2 in multiplication by 7.
 ...                X25519 test vectors                                396   397 - special case for z_2 in multiplication by 7.
[OK]                X25519 test vectors                                396   397 - special case for z_2 in multiplication by 7.
 ...                X25519 test vectors                                397   398 - special case for BB in multiplication by 7.
[OK]                X25519 test vectors                                397   398 - special case for BB in multiplication by 7.
 ...                X25519 test vectors                                398   399 - special case for BB in multiplication by 7.
[OK]                X25519 test vectors                                398   399 - special case for BB in multiplication by 7.
 ...                X25519 test vectors                                399   400 - special case for BB in multiplication by 7.
[OK]                X25519 test vectors                                399   400 - special case for BB in multiplication by 7.
 ...                X25519 test vectors                                400   401 - special case for E in multiplication by 7.
[OK]                X25519 test vectors                                400   401 - special case for E in multiplication by 7.
 ...                X25519 test vectors                                401   402 - special case for E in multiplication by 7.
[OK]                X25519 test vectors                                401   402 - special case for E in multiplication by 7.
 ...                X25519 test vectors                                402   403 - special case for E in multiplication by 7.
[OK]                X25519 test vectors                                402   403 - special case for E in multiplication by 7.
 ...                X25519 test vectors                                403   404 - special case for E in multiplication by 7.
[OK]                X25519 test vectors                                403   404 - special case for E in multiplication by 7.
 ...                X25519 test vectors                                404   405 - special case for AA in multiplication by 7.
[OK]                X25519 test vectors                                404   405 - special case for AA in multiplication by 7.
 ...                X25519 test vectors                                405   406 - special case for AA in multiplication by 7.
[OK]                X25519 test vectors                                405   406 - special case for AA in multiplication by 7.
 ...                X25519 test vectors                                406   407 - special case for AA in multiplication by 7.
[OK]                X25519 test vectors                                406   407 - special case for AA in multiplication by 7.
 ...                X25519 test vectors                                407   408 - special case for AA in multiplication by 7.
[OK]                X25519 test vectors                                407   408 - special case for AA in multiplication by 7.
 ...                X25519 test vectors                                408   409 - special case for AA in multiplication by 7.
[OK]                X25519 test vectors                                408   409 - special case for AA in multiplication by 7.
 ...                X25519 test vectors                                409   410 - special case for AA in multiplication by 7.
[OK]                X25519 test vectors                                409   410 - special case for AA in multiplication by 7.
 ...                X25519 test vectors                                410   411 - special case for AA in multiplication by 7.
[OK]                X25519 test vectors                                410   411 - special case for AA in multiplication by 7.
 ...                X25519 test vectors                                411   412 - special case for x_2 in multiplication by 7.
[OK]                X25519 test vectors                                411   412 - special case for x_2 in multiplication by 7.
 ...                X25519 test vectors                                412   413 - special case for x_2 in multiplication by 7.
[OK]                X25519 test vectors                                412   413 - special case for x_2 in multiplication by 7.
 ...                X25519 test vectors                                413   414 - special case for x_2 in multiplication by 7.
[OK]                X25519 test vectors                                413   414 - special case for x_2 in multiplication by 7.
 ...                X25519 test vectors                                414   415 - special case for x_2 in multiplication by 7.
[OK]                X25519 test vectors                                414   415 - special case for x_2 in multiplication by 7.
 ...                X25519 test vectors                                415   416 - special case for x_2 in multiplication by 7.
[OK]                X25519 test vectors                                415   416 - special case for x_2 in multiplication by 7.
 ...                X25519 test vectors                                416   417 - special case for x_2 in multiplication by 7.
[OK]                X25519 test vectors                                416   417 - special case for x_2 in multiplication by 7.
 ...                X25519 test vectors                                417   418 - special case for x_2 in multiplication by 7.
[OK]                X25519 test vectors                                417   418 - special case for x_2 in multiplication by 7.
 ...                X25519 test vectors                                418   419 - special case for x_2 in multiplication by 7.
[OK]                X25519 test vectors                                418   419 - special case for x_2 in multiplication by 7.
 ...                X25519 test vectors                                419   420 - special case for x_2 in multiplication by 7.
[OK]                X25519 test vectors                                419   420 - special case for x_2 in multiplication by 7.
 ...                X25519 test vectors                                420   421 - special case for DA - CB in multiplication by 7.
[OK]                X25519 test vectors                                420   421 - special case for DA - CB in multiplication by 7.
 ...                X25519 test vectors                                421   422 - special case for DA - CB in multiplication by 7.
[OK]                X25519 test vectors                                421   422 - special case for DA - CB in multiplication by 7.
 ...                X25519 test vectors                                422   423 - special case for DA - CB in multiplication by 7.
[OK]                X25519 test vectors                                422   423 - special case for DA - CB in multiplication by 7.
 ...                X25519 test vectors                                423   424 - special case for DA - CB in multiplication by 7.
[OK]                X25519 test vectors                                423   424 - special case for DA - CB in multiplication by 7.
 ...                X25519 test vectors                                424   425 - special case for D in multiplication by 8.
[OK]                X25519 test vectors                                424   425 - special case for D in multiplication by 8.
 ...                X25519 test vectors                                425   426 - special case for D in multiplication by 8.
[OK]                X25519 test vectors                                425   426 - special case for D in multiplication by 8.
 ...                X25519 test vectors                                426   427 - special case for D in multiplication by 8.
[OK]                X25519 test vectors                                426   427 - special case for D in multiplication by 8.
 ...                X25519 test vectors                                427   428 - special case for DA + CB in multiplication by 8.
[OK]                X25519 test vectors                                427   428 - special case for DA + CB in multiplication by 8.
 ...                X25519 test vectors                                428   429 - special case for DA + CB in multiplication by 8.
[OK]                X25519 test vectors                                428   429 - special case for DA + CB in multiplication by 8.
 ...                X25519 test vectors                                429   430 - special case for DA + CB in multiplication by 8.
[OK]                X25519 test vectors                                429   430 - special case for DA + CB in multiplication by 8.
 ...                X25519 test vectors                                430   431 - special case for DA + CB in multiplication by 8.
[OK]                X25519 test vectors                                430   431 - special case for DA + CB in multiplication by 8.
 ...                X25519 test vectors                                431   432 - special case for DA + CB in multiplication by 8.
[OK]                X25519 test vectors                                431   432 - special case for DA + CB in multiplication by 8.
 ...                X25519 test vectors                                432   433 - special case for DA + CB in multiplication by 8.
[OK]                X25519 test vectors                                432   433 - special case for DA + CB in multiplication by 8.
 ...                X25519 test vectors                                433   434 - special case for DA + CB in multiplication by 8.
[OK]                X25519 test vectors                                433   434 - special case for DA + CB in multiplication by 8.
 ...                X25519 test vectors                                434   435 - special case for DA + CB in multiplication by 8.
[OK]                X25519 test vectors                                434   435 - special case for DA + CB in multiplication by 8.
 ...                X25519 test vectors                                435   436 - special case for AA in multiplication by 8.
[OK]                X25519 test vectors                                435   436 - special case for AA in multiplication by 8.
 ...                X25519 test vectors                                436   437 - special case for AA in multiplication by 8.
[OK]                X25519 test vectors                                436   437 - special case for AA in multiplication by 8.
 ...                X25519 test vectors                                437   438 - special case for AA in multiplication by 8.
[OK]                X25519 test vectors                                437   438 - special case for AA in multiplication by 8.
 ...                X25519 test vectors                                438   439 - special case for z_2 in multiplication by 8.
[OK]                X25519 test vectors                                438   439 - special case for z_2 in multiplication by 8.
 ...                X25519 test vectors                                439   440 - special case for z_2 in multiplication by 8.
[OK]                X25519 test vectors                                439   440 - special case for z_2 in multiplication by 8.
 ...                X25519 test vectors                                440   441 - special case for z_2 in multiplication by 8.
[OK]                X25519 test vectors                                440   441 - special case for z_2 in multiplication by 8.
 ...                X25519 test vectors                                441   442 - special case for B in multiplication by 8.
[OK]                X25519 test vectors                                441   442 - special case for B in multiplication by 8.
 ...                X25519 test vectors                                442   443 - special case for B in multiplication by 8.
[OK]                X25519 test vectors                                442   443 - special case for B in multiplication by 8.
 ...                X25519 test vectors                                443   444 - special case for B in multiplication by 8.
[OK]                X25519 test vectors                                443   444 - special case for B in multiplication by 8.
 ...                X25519 test vectors                                444   445 - special case for C in multiplication by 8.
[OK]                X25519 test vectors                                444   445 - special case for C in multiplication by 8.
 ...                X25519 test vectors                                445   446 - special case for C in multiplication by 8.
[OK]                X25519 test vectors                                445   446 - special case for C in multiplication by 8.
 ...                X25519 test vectors                                446   447 - special case for C in multiplication by 8.
[OK]                X25519 test vectors                                446   447 - special case for C in multiplication by 8.
 ...                X25519 test vectors                                447   448 - special case for C in multiplication by 8.
[OK]                X25519 test vectors                                447   448 - special case for C in multiplication by 8.
 ...                X25519 test vectors                                448   449 - special case for x_2 in multiplication by 8.
[OK]                X25519 test vectors                                448   449 - special case for x_2 in multiplication by 8.
 ...                X25519 test vectors                                449   450 - special case for x_2 in multiplication by 8.
[OK]                X25519 test vectors                                449   450 - special case for x_2 in multiplication by 8.
 ...                X25519 test vectors                                450   451 - special case for x_2 in multiplication by 8.
[OK]                X25519 test vectors                                450   451 - special case for x_2 in multiplication by 8.
 ...                X25519 test vectors                                451   452 - special case for x_2 in multiplication by 8.
[OK]                X25519 test vectors                                451   452 - special case for x_2 in multiplication by 8.
 ...                X25519 test vectors                                452   453 - special case for x_2 in multiplication by 8.
[OK]                X25519 test vectors                                452   453 - special case for x_2 in multiplication by 8.
 ...                X25519 test vectors                                453   454 - special case for x_2 in multiplication by 8.
[OK]                X25519 test vectors                                453   454 - special case for x_2 in multiplication by 8.
 ...                X25519 test vectors                                454   455 - special case for x_2 in multiplication by 8.
[OK]                X25519 test vectors                                454   455 - special case for x_2 in multiplication by 8.
 ...                X25519 test vectors                                455   456 - special case for x_2 in multiplication by 8.
[OK]                X25519 test vectors                                455   456 - special case for x_2 in multiplication by 8.
 ...                X25519 test vectors                                456   457 - special case for x_2 in multiplication by 8.
[OK]                X25519 test vectors                                456   457 - special case for x_2 in multiplication by 8.
 ...                X25519 test vectors                                457   458 - special case for x_2 in multiplication by 8.
[OK]                X25519 test vectors                                457   458 - special case for x_2 in multiplication by 8.
 ...                X25519 test vectors                                458   459 - special case for x_2 in multiplication by 8.
[OK]                X25519 test vectors                                458   459 - special case for x_2 in multiplication by 8.
 ...                X25519 test vectors                                459   460 - special case for x_2 in multiplication by 8.
[OK]                X25519 test vectors                                459   460 - special case for x_2 in multiplication by 8.
 ...                X25519 test vectors                                460   461 - special case for x_2 in multiplication by 8.
[OK]                X25519 test vectors                                460   461 - special case for x_2 in multiplication by 8.
 ...                X25519 test vectors                                461   462 - special case for x_2 in multiplication by 8.
[OK]                X25519 test vectors                                461   462 - special case for x_2 in multiplication by 8.
 ...                X25519 test vectors                                462   463 - special case for E in multiplication by 8.
[OK]                X25519 test vectors                                462   463 - special case for E in multiplication by 8.
 ...                X25519 test vectors                                463   464 - special case for E in multiplication by 8.
[OK]                X25519 test vectors                                463   464 - special case for E in multiplication by 8.
 ...                X25519 test vectors                                464   465 - special case for E in multiplication by 8.
[OK]                X25519 test vectors                                464   465 - special case for E in multiplication by 8.
 ...                X25519 test vectors                                465   466 - special case for E in multiplication by 8.
[OK]                X25519 test vectors                                465   466 - special case for E in multiplication by 8.
 ...                X25519 test vectors                                466   467 - special case for E in multiplication by 8.
[OK]                X25519 test vectors                                466   467 - special case for E in multiplication by 8.
 ...                X25519 test vectors                                467   468 - special case for E in multiplication by 8.
[OK]                X25519 test vectors                                467   468 - special case for E in multiplication by 8.
 ...                X25519 test vectors                                468   469 - special case for E in multiplication by 8.
[OK]                X25519 test vectors                                468   469 - special case for E in multiplication by 8.
 ...                X25519 test vectors                                469   470 - special case for E in multiplication by 8.
[OK]                X25519 test vectors                                469   470 - special case for E in multiplication by 8.
 ...                X25519 test vectors                                470   471 - special case for E in multiplication by 8.
[OK]                X25519 test vectors                                470   471 - special case for E in multiplication by 8.
 ...                X25519 test vectors                                471   472 - special case for DA - CB in multiplication by 8.
[OK]                X25519 test vectors                                471   472 - special case for DA - CB in multiplication by 8.
 ...                X25519 test vectors                                472   473 - special case for DA - CB in multiplication by 8.
[OK]                X25519 test vectors                                472   473 - special case for DA - CB in multiplication by 8.
 ...                X25519 test vectors                                473   474 - special case for DA - CB in multiplication by 8.
[OK]                X25519 test vectors                                473   474 - special case for DA - CB in multiplication by 8.
 ...                X25519 test vectors                                474   475 - special case for DA - CB in multiplication by 8.
[OK]                X25519 test vectors                                474   475 - special case for DA - CB in multiplication by 8.
 ...                X25519 test vectors                                475   476 - special case for DA - CB in multiplication by 8.
[OK]                X25519 test vectors                                475   476 - special case for DA - CB in multiplication by 8.
 ...                X25519 test vectors                                476   477 - special case for CB in multiplication by 8.
[OK]                X25519 test vectors                                476   477 - special case for CB in multiplication by 8.
 ...                X25519 test vectors                                477   478 - special case for CB in multiplication by 8.
[OK]                X25519 test vectors                                477   478 - special case for CB in multiplication by 8.
 ...                X25519 test vectors                                478   479 - special case for BB in multiplication by 8.
[OK]                X25519 test vectors                                478   479 - special case for BB in multiplication by 8.
 ...                X25519 test vectors                                479   480 - special case for BB in multiplication by 8.
[OK]                X25519 test vectors                                479   480 - special case for BB in multiplication by 8.
 ...                X25519 test vectors                                480   481 - special case for BB in multiplication by 8.
[OK]                X25519 test vectors                                480   481 - special case for BB in multiplication by 8.
 ...                X25519 test vectors                                481   482 - special case for BB in multiplication by 8.
[OK]                X25519 test vectors                                481   482 - special case for BB in multiplication by 8.
 ...                X25519 test vectors                                482   483 - special case for A in multiplication by 8.
[OK]                X25519 test vectors                                482   483 - special case for A in multiplication by 8.
 ...                X25519 test vectors                                483   484 - special case for A in multiplication by 8.
[OK]                X25519 test vectors                                483   484 - special case for A in multiplication by 8.
 ...                X25519 test vectors                                484   485 - special case for DA in multiplication by 8.
[OK]                X25519 test vectors                                484   485 - special case for DA in multiplication by 8.
 ...                X25519 test vectors                                485   486 - special case for DA in multiplication by 8.
[OK]                X25519 test vectors                                485   486 - special case for DA in multiplication by 8.
 ...                X25519 test vectors                                486   487 - special case for AA in multiplication by 9.
[OK]                X25519 test vectors                                486   487 - special case for AA in multiplication by 9.
 ...                X25519 test vectors                                487   488 - special case for AA in multiplication by 9.
[OK]                X25519 test vectors                                487   488 - special case for AA in multiplication by 9.
 ...                X25519 test vectors                                488   489 - special case for AA in multiplication by 9.
[OK]                X25519 test vectors                                488   489 - special case for AA in multiplication by 9.
 ...                X25519 test vectors                                489   490 - special case for AA in multiplication by 9.
[OK]                X25519 test vectors                                489   490 - special case for AA in multiplication by 9.
 ...                X25519 test vectors                                490   491 - special case for AA in multiplication by 9.
[OK]                X25519 test vectors                                490   491 - special case for AA in multiplication by 9.
 ...                X25519 test vectors                                491   492 - special case for AA in multiplication by 9.
[OK]                X25519 test vectors                                491   492 - special case for AA in multiplication by 9.
 ...                X25519 test vectors                                492   493 - special case for AA in multiplication by 9.
[OK]                X25519 test vectors                                492   493 - special case for AA in multiplication by 9.
 ...                X25519 test vectors                                493   494 - special case for DA - CB in multiplication by 9.
[OK]                X25519 test vectors                                493   494 - special case for DA - CB in multiplication by 9.
 ...                X25519 test vectors                                494   495 - special case for z_2 in multiplication by 9.
[OK]                X25519 test vectors                                494   495 - special case for z_2 in multiplication by 9.
 ...                X25519 test vectors                                495   496 - special case for z_2 in multiplication by 9.
[OK]                X25519 test vectors                                495   496 - special case for z_2 in multiplication by 9.
 ...                X25519 test vectors                                496   497 - special case for z_2 in multiplication by 9.
[OK]                X25519 test vectors                                496   497 - special case for z_2 in multiplication by 9.
 ...                X25519 test vectors                                497   498 - special case for z_2 in multiplication by 9.
[OK]                X25519 test vectors                                497   498 - special case for z_2 in multiplication by 9.
 ...                X25519 test vectors                                498   499 - special case for z_2 in multiplication by 9.
[OK]                X25519 test vectors                                498   499 - special case for z_2 in multiplication by 9.
 ...                X25519 test vectors                                499   500 - special case for z_2 in multiplication by 9.
[OK]                X25519 test vectors                                499   500 - special case for z_2 in multiplication by 9.
 ...                X25519 test vectors                                500   501 - special case for E in multiplication by 9.
[OK]                X25519 test vectors                                500   501 - special case for E in multiplication by 9.
 ...                X25519 test vectors                                501   502 - special case for E in multiplication by 9.
[OK]                X25519 test vectors                                501   502 - special case for E in multiplication by 9.
 ...                X25519 test vectors                                502   503 - special case for E in multiplication by 9.
[OK]                X25519 test vectors                                502   503 - special case for E in multiplication by 9.
 ...                X25519 test vectors                                503   504 - special case for x_2 in multiplication by 9.
[OK]                X25519 test vectors                                503   504 - special case for x_2 in multiplication by 9.
 ...                X25519 test vectors                                504   505 - special case for x_2 in multiplication by 9.
[OK]                X25519 test vectors                                504   505 - special case for x_2 in multiplication by 9.
 ...                X25519 test vectors                                505   506 - special case for x_2 in multiplication by 9.
[OK]                X25519 test vectors                                505   506 - special case for x_2 in multiplication by 9.
 ...                X25519 test vectors                                506   507 - special case for BB in multiplication by 9.
[OK]                X25519 test vectors                                506   507 - special case for BB in multiplication by 9.
 ...                X25519 test vectors                                507   508 - special case for BB in multiplication by 9.
[OK]                X25519 test vectors                                507   508 - special case for BB in multiplication by 9.
 ...                X25519 test vectors                                508   509 - special case for BB in multiplication by 9.
[OK]                X25519 test vectors                                508   509 - special case for BB in multiplication by 9.
 ...                X25519 test vectors                                509   510 - special case for BB in multiplication by 9.
[OK]                X25519 test vectors                                509   510 - special case for BB in multiplication by 9.
 ...                X25519 test vectors                                510   511 - private key == -1 (mod order).
[OK]                X25519 test vectors                                510   511 - private key == -1 (mod order).
 ...                X25519 test vectors                                511   512 - private key == 1 (mod order) on twist.
[OK]                X25519 test vectors                                511   512 - private key == 1 (mod order) on twist.
 ...                X25519 test vectors                                512   513 - special case private key.
[OK]                X25519 test vectors                                512   513 - special case private key.
 ...                X25519 test vectors                                513   514 - special case private key.
[OK]                X25519 test vectors                                513   514 - special case private key.
 ...                X25519 test vectors                                514   515 - special case private key.
[OK]                X25519 test vectors                                514   515 - special case private key.
 ...                X25519 test vectors                                515   516 - special case private key.
[OK]                X25519 test vectors                                515   516 - special case private key.
 ...                X25519 test vectors                                516   517 - special case private key.
[OK]                X25519 test vectors                                516   517 - special case private key.
 ...                X25519 test vectors                                517   518 - special case private key.
[OK]                X25519 test vectors                                517   518 - special case private key.
 ...                ED25519 test vectors                                 0   1 - .
[OK]                ED25519 test vectors                                 0   1 - .
 ...                ED25519 test vectors                                 1   2 - .
[OK]                ED25519 test vectors                                 1   2 - .
 ...                ED25519 test vectors                                 2   3 - .
[OK]                ED25519 test vectors                                 2   3 - .
 ...                ED25519 test vectors                                 3   4 - .
[OK]                ED25519 test vectors                                 3   4 - .
 ...                ED25519 test vectors                                 4   5 - .
[OK]                ED25519 test vectors                                 4   5 - .
 ...                ED25519 test vectors                                 5   6 - .
[OK]                ED25519 test vectors                                 5   6 - .
 ...                ED25519 test vectors                                 6   7 - .
[OK]                ED25519 test vectors                                 6   7 - .
 ...                ED25519 test vectors                                 7   8 - .
[OK]                ED25519 test vectors                                 7   8 - .
 ...                ED25519 test vectors                                 8   9 - .
[OK]                ED25519 test vectors                                 8   9 - .
 ...                ED25519 test vectors                                 9   10 - special values for r and s.
[OK]                ED25519 test vectors                                 9   10 - special values for r and s.
 ...                ED25519 test vectors                                10   11 - special values for r and s.
[OK]                ED25519 test vectors                                10   11 - special values for r and s.
 ...                ED25519 test vectors                                11   12 - special values for r and s.
[OK]                ED25519 test vectors                                11   12 - special values for r and s.
 ...                ED25519 test vectors                                12   13 - special values for r and s.
[OK]                ED25519 test vectors                                12   13 - special values for r and s.
 ...                ED25519 test vectors                                13   14 - special values for r and s.
[OK]                ED25519 test vectors                                13   14 - special values for r and s.
 ...                ED25519 test vectors                                14   15 - special values for r and s.
[OK]                ED25519 test vectors                                14   15 - special values for r and s.
 ...                ED25519 test vectors                                15   16 - special values for r and s.
[OK]                ED25519 test vectors                                15   16 - special values for r and s.
 ...                ED25519 test vectors                                16   17 - special values for r and s.
[OK]                ED25519 test vectors                                16   17 - special values for r and s.
 ...                ED25519 test vectors                                17   18 - special values for r and s.
[OK]                ED25519 test vectors                                17   18 - special values for r and s.
 ...                ED25519 test vectors                                18   19 - special values for r and s.
[OK]                ED25519 test vectors                                18   19 - special values for r and s.
 ...                ED25519 test vectors                                19   20 - special values for r and s.
[OK]                ED25519 test vectors                                19   20 - special values for r and s.
 ...                ED25519 test vectors                                20   21 - special values for r and s.
[OK]                ED25519 test vectors                                20   21 - special values for r and s.
 ...                ED25519 test vectors                                21   22 - special values for r and s.
[OK]                ED25519 test vectors                                21   22 - special values for r and s.
 ...                ED25519 test vectors                                22   23 - special values for r and s.
[OK]                ED25519 test vectors                                22   23 - special values for r and s.
 ...                ED25519 test vectors                                23   24 - special values for r and s.
[OK]                ED25519 test vectors                                23   24 - special values for r and s.
 ...                ED25519 test vectors                                24   25 - special values for r and s.
[OK]                ED25519 test vectors                                24   25 - special values for r and s.
 ...                ED25519 test vectors                                25   26 - special values for r and s.
[OK]                ED25519 test vectors                                25   26 - special values for r and s.
 ...                ED25519 test vectors                                26   27 - special values for r and s.
[OK]                ED25519 test vectors                                26   27 - special values for r and s.
 ...                ED25519 test vectors                                27   28 - special values for r and s.
[OK]                ED25519 test vectors                                27   28 - special values for r and s.
 ...                ED25519 test vectors                                28   29 - special values for r and s.
[OK]                ED25519 test vectors                                28   29 - special values for r and s.
 ...                ED25519 test vectors                                29   30 - empty signature.
[OK]                ED25519 test vectors                                29   30 - empty signature.
 ...                ED25519 test vectors                                30   31 - s missing.
[OK]                ED25519 test vectors                                30   31 - s missing.
 ...                ED25519 test vectors                                31   32 - signature too short.
[OK]                ED25519 test vectors                                31   32 - signature too short.
 ...                ED25519 test vectors                                32   33 - signature too long.
[OK]                ED25519 test vectors                                32   33 - signature too long.
 ...                ED25519 test vectors                                33   34 - include pk in signature.
[OK]                ED25519 test vectors                                33   34 - include pk in signature.
 ...                ED25519 test vectors                                34   35 - prepending 0 byte to signature.
[OK]                ED25519 test vectors                                34   35 - prepending 0 byte to signature.
 ...                ED25519 test vectors                                35   36 - prepending 0 byte to s.
[OK]                ED25519 test vectors                                35   36 - prepending 0 byte to s.
 ...                ED25519 test vectors                                36   37 - appending 0 byte to signature.
[OK]                ED25519 test vectors                                36   37 - appending 0 byte to signature.
 ...                ED25519 test vectors                                37   38 - removing 0 byte from signature.
[OK]                ED25519 test vectors                                37   38 - removing 0 byte from signature.
 ...                ED25519 test vectors                                38   39 - removing 0 byte from signature.
[OK]                ED25519 test vectors                                38   39 - removing 0 byte from signature.
 ...                ED25519 test vectors                                39   40 - removing leading 0 byte from signature.
[OK]                ED25519 test vectors                                39   40 - removing leading 0 byte from signature.
 ...                ED25519 test vectors                                40   41 - dropping byte from signature.
[OK]                ED25519 test vectors                                40   41 - dropping byte from signature.
 ...                ED25519 test vectors                                41   42 - modified bit 0 in R.
[OK]                ED25519 test vectors                                41   42 - modified bit 0 in R.
 ...                ED25519 test vectors                                42   43 - modified bit 1 in R.
[OK]                ED25519 test vectors                                42   43 - modified bit 1 in R.
 ...                ED25519 test vectors                                43   44 - modified bit 2 in R.
[OK]                ED25519 test vectors                                43   44 - modified bit 2 in R.
 ...                ED25519 test vectors                                44   45 - modified bit 7 in R.
[OK]                ED25519 test vectors                                44   45 - modified bit 7 in R.
 ...                ED25519 test vectors                                45   46 - modified bit 8 in R.
[OK]                ED25519 test vectors                                45   46 - modified bit 8 in R.
 ...                ED25519 test vectors                                46   47 - modified bit 16 in R.
[OK]                ED25519 test vectors                                46   47 - modified bit 16 in R.
 ...                ED25519 test vectors                                47   48 - modified bit 31 in R.
[OK]                ED25519 test vectors                                47   48 - modified bit 31 in R.
 ...                ED25519 test vectors                                48   49 - modified bit 32 in R.
[OK]                ED25519 test vectors                                48   49 - modified bit 32 in R.
 ...                ED25519 test vectors                                49   50 - modified bit 63 in R.
[OK]                ED25519 test vectors                                49   50 - modified bit 63 in R.
 ...                ED25519 test vectors                                50   51 - modified bit 64 in R.
[OK]                ED25519 test vectors                                50   51 - modified bit 64 in R.
 ...                ED25519 test vectors                                51   52 - modified bit 97 in R.
[OK]                ED25519 test vectors                                51   52 - modified bit 97 in R.
 ...                ED25519 test vectors                                52   53 - modified bit 127 in R.
[OK]                ED25519 test vectors                                52   53 - modified bit 127 in R.
 ...                ED25519 test vectors                                53   54 - modified bit 240 in R.
[OK]                ED25519 test vectors                                53   54 - modified bit 240 in R.
 ...                ED25519 test vectors                                54   55 - modified bit 247 in R.
[OK]                ED25519 test vectors                                54   55 - modified bit 247 in R.
 ...                ED25519 test vectors                                55   56 - modified bit 248 in R.
[OK]                ED25519 test vectors                                55   56 - modified bit 248 in R.
 ...                ED25519 test vectors                                56   57 - modified bit 253 in R.
[OK]                ED25519 test vectors                                56   57 - modified bit 253 in R.
 ...                ED25519 test vectors                                57   58 - modified bit 254 in R.
[OK]                ED25519 test vectors                                57   58 - modified bit 254 in R.
 ...                ED25519 test vectors                                58   59 - modified bit 255 in R.
[OK]                ED25519 test vectors                                58   59 - modified bit 255 in R.
 ...                ED25519 test vectors                                59   60 - R==0.
[OK]                ED25519 test vectors                                59   60 - R==0.
 ...                ED25519 test vectors                                60   61 - invalid R.
[OK]                ED25519 test vectors                                60   61 - invalid R.
 ...                ED25519 test vectors                                61   62 - all bits flipped in R.
[OK]                ED25519 test vectors                                61   62 - all bits flipped in R.
 ...                ED25519 test vectors                                62   63 - checking malleability .
[OK]                ED25519 test vectors                                62   63 - checking malleability .
 ...                ED25519 test vectors                                63   64 - checking malleability .
[OK]                ED25519 test vectors                                63   64 - checking malleability .
 ...                ED25519 test vectors                                64   65 - checking malleability .
[OK]                ED25519 test vectors                                64   65 - checking malleability .
 ...                ED25519 test vectors                                65   66 - checking malleability .
[OK]                ED25519 test vectors                                65   66 - checking malleability .
 ...                ED25519 test vectors                                66   67 - checking malleability .
[OK]                ED25519 test vectors                                66   67 - checking malleability .
 ...                ED25519 test vectors                                67   68 - checking malleability .
[OK]                ED25519 test vectors                                67   68 - checking malleability .
 ...                ED25519 test vectors                                68   69 - checking malleability .
[OK]                ED25519 test vectors                                68   69 - checking malleability .
 ...                ED25519 test vectors                                69   70 - checking malleability .
[OK]                ED25519 test vectors                                69   70 - checking malleability .
 ...                ED25519 test vectors                                70   71 - .
[OK]                ED25519 test vectors                                70   71 - .
 ...                ED25519 test vectors                                71   72 - .
[OK]                ED25519 test vectors                                71   72 - .
 ...                ED25519 test vectors                                72   73 - .
[OK]                ED25519 test vectors                                72   73 - .
 ...                ED25519 test vectors                                73   74 - .
[OK]                ED25519 test vectors                                73   74 - .
 ...                ED25519 test vectors                                74   75 - .
[OK]                ED25519 test vectors                                74   75 - .
 ...                ED25519 test vectors                                75   76 - .
[OK]                ED25519 test vectors                                75   76 - .
 ...                ED25519 test vectors                                76   77 - .
[OK]                ED25519 test vectors                                76   77 - .
 ...                ED25519 test vectors                                77   78 - .
[OK]                ED25519 test vectors                                77   78 - .
 ...                ED25519 test vectors                                78   79 - .
[OK]                ED25519 test vectors                                78   79 - .
 ...                ED25519 test vectors                                79   80 - draft-josefsson-eddsa-ed25519-02: Test 1.
[OK]                ED25519 test vectors                                79   80 - draft-josefsson-eddsa-ed25519-02: Test 1.
 ...                ED25519 test vectors                                80   81 - draft-josefsson-eddsa-ed25519-02: Test 2.
[OK]                ED25519 test vectors                                80   81 - draft-josefsson-eddsa-ed25519-02: Test 2.
 ...                ED25519 test vectors                                81   82 - draft-josefsson-eddsa-ed25519-02: Test 3.
[OK]                ED25519 test vectors                                81   82 - draft-josefsson-eddsa-ed25519-02: Test 3.
 ...                ED25519 test vectors                                82   83 - draft-josefsson-eddsa-ed25519-02: Test 1024.
[OK]                ED25519 test vectors                                82   83 - draft-josefsson-eddsa-ed25519-02: Test 1024.
 ...                ED25519 test vectors                                83   84 - Random test failure 1.
[OK]                ED25519 test vectors                                83   84 - Random test failure 1.
 ...                ED25519 test vectors                                84   85 - Random test failure 2.
[OK]                ED25519 test vectors                                84   85 - Random test failure 2.
 ...                ED25519 test vectors                                85   86 - Random test failure 24.
[OK]                ED25519 test vectors                                85   86 - Random test failure 24.
 ...                ED25519 test vectors                                86   87 - Random test failure 3.
[OK]                ED25519 test vectors                                86   87 - Random test failure 3.
 ...                ED25519 test vectors                                87   88 - Random test failure 20.
[OK]                ED25519 test vectors                                87   88 - Random test failure 20.
 ...                ED25519 test vectors                                88   89 - Random test failure 4.
[OK]                ED25519 test vectors                                88   89 - Random test failure 4.
 ...                ED25519 test vectors                                89   90 - Random test failure 5.
[OK]                ED25519 test vectors                                89   90 - Random test failure 5.
 ...                ED25519 test vectors                                90   91 - Random test failure 8.
[OK]                ED25519 test vectors                                90   91 - Random test failure 8.
 ...                ED25519 test vectors                                91   92 - Random test failure 10.
[OK]                ED25519 test vectors                                91   92 - Random test failure 10.
 ...                ED25519 test vectors                                92   93 - Random test failure 12.
[OK]                ED25519 test vectors                                92   93 - Random test failure 12.
 ...                ED25519 test vectors                                93   94 - Random test failure 15.
[OK]                ED25519 test vectors                                93   94 - Random test failure 15.
 ...                ED25519 test vectors                                94   95 - Random test failure 19.
[OK]                ED25519 test vectors                                94   95 - Random test failure 19.
 ...                ED25519 test vectors                                95   96 - Random test failure 25.
[OK]                ED25519 test vectors                                95   96 - Random test failure 25.
 ...                ED25519 test vectors                                96   97 - Random test failure 28.
[OK]                ED25519 test vectors                                96   97 - Random test failure 28.
 ...                ED25519 test vectors                                97   98 - Random test failure 6.
[OK]                ED25519 test vectors                                97   98 - Random test failure 6.
 ...                ED25519 test vectors                                98   99 - Random test failure 21.
[OK]                ED25519 test vectors                                98   99 - Random test failure 21.
 ...                ED25519 test vectors                                99   100 - Random test failure 7.
[OK]                ED25519 test vectors                                99   100 - Random test failure 7.
 ...                ED25519 test vectors                               100   101 - Random test failure 9.
[OK]                ED25519 test vectors                               100   101 - Random test failure 9.
 ...                ED25519 test vectors                               101   102 - Random test failure 11.
[OK]                ED25519 test vectors                               101   102 - Random test failure 11.
 ...                ED25519 test vectors                               102   103 - Random test failure 14.
[OK]                ED25519 test vectors                               102   103 - Random test failure 14.
 ...                ED25519 test vectors                               103   104 - Random test failure 18.
[OK]                ED25519 test vectors                               103   104 - Random test failure 18.
 ...                ED25519 test vectors                               104   105 - Random test failure 13.
[OK]                ED25519 test vectors                               104   105 - Random test failure 13.
 ...                ED25519 test vectors                               105   106 - Random test failure 22.
[OK]                ED25519 test vectors                               105   106 - Random test failure 22.
 ...                ED25519 test vectors                               106   107 - Random test failure 16.
[OK]                ED25519 test vectors                               106   107 - Random test failure 16.
 ...                ED25519 test vectors                               107   108 - Random test failure 23.
[OK]                ED25519 test vectors                               107   108 - Random test failure 23.
 ...                ED25519 test vectors                               108   109 - Random test failure 17.
[OK]                ED25519 test vectors                               108   109 - Random test failure 17.
 ...                ED25519 test vectors                               109   110 - Random test failure 26.
[OK]                ED25519 test vectors                               109   110 - Random test failure 26.
 ...                ED25519 test vectors                               110   111 - Random test failure 27.
[OK]                ED25519 test vectors                               110   111 - Random test failure 27.
 ...                ED25519 test vectors                               111   112 - Test case for overflow in signature generation.
[OK]                ED25519 test vectors                               111   112 - Test case for overflow in signature generation.
 ...                ED25519 test vectors                               112   113 - Test case for overflow in signature generation.
[OK]                ED25519 test vectors                               112   113 - Test case for overflow in signature generation.
 ...                ED25519 test vectors                               113   114 - Test case for overflow in signature generation.
[OK]                ED25519 test vectors                               113   114 - Test case for overflow in signature generation.
 ...                ED25519 test vectors                               114   115 - Test case for overflow in signature generation.
[OK]                ED25519 test vectors                               114   115 - Test case for overflow in signature generation.
 ...                ED25519 test vectors                               115   116 - Test case for overflow in signature generation.
[OK]                ED25519 test vectors                               115   116 - Test case for overflow in signature generation.
 ...                ED25519 test vectors                               116   117 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               116   117 - regression test for arithmetic error.
 ...                ED25519 test vectors                               117   118 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               117   118 - regression test for arithmetic error.
 ...                ED25519 test vectors                               118   119 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               118   119 - regression test for arithmetic error.
 ...                ED25519 test vectors                               119   120 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               119   120 - regression test for arithmetic error.
 ...                ED25519 test vectors                               120   121 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               120   121 - regression test for arithmetic error.
 ...                ED25519 test vectors                               121   122 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               121   122 - regression test for arithmetic error.
 ...                ED25519 test vectors                               122   123 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               122   123 - regression test for arithmetic error.
 ...                ED25519 test vectors                               123   124 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               123   124 - regression test for arithmetic error.
 ...                ED25519 test vectors                               124   125 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               124   125 - regression test for arithmetic error.
 ...                ED25519 test vectors                               125   126 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               125   126 - regression test for arithmetic error.
 ...                ED25519 test vectors                               126   127 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               126   127 - regression test for arithmetic error.
 ...                ED25519 test vectors                               127   128 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               127   128 - regression test for arithmetic error.
 ...                ED25519 test vectors                               128   129 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               128   129 - regression test for arithmetic error.
 ...                ED25519 test vectors                               129   130 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               129   130 - regression test for arithmetic error.
 ...                ED25519 test vectors                               130   131 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               130   131 - regression test for arithmetic error.
 ...                ED25519 test vectors                               131   132 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               131   132 - regression test for arithmetic error.
 ...                ED25519 test vectors                               132   133 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               132   133 - regression test for arithmetic error.
 ...                ED25519 test vectors                               133   134 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               133   134 - regression test for arithmetic error.
 ...                ED25519 test vectors                               134   135 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               134   135 - regression test for arithmetic error.
 ...                ED25519 test vectors                               135   136 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               135   136 - regression test for arithmetic error.
 ...                ED25519 test vectors                               136   137 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               136   137 - regression test for arithmetic error.
 ...                ED25519 test vectors                               137   138 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               137   138 - regression test for arithmetic error.
 ...                ED25519 test vectors                               138   139 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               138   139 - regression test for arithmetic error.
 ...                ED25519 test vectors                               139   140 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               139   140 - regression test for arithmetic error.
 ...                ED25519 test vectors                               140   141 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               140   141 - regression test for arithmetic error.
 ...                ED25519 test vectors                               141   142 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               141   142 - regression test for arithmetic error.
 ...                ED25519 test vectors                               142   143 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               142   143 - regression test for arithmetic error.
 ...                ED25519 test vectors                               143   144 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               143   144 - regression test for arithmetic error.
 ...                ED25519 test vectors                               144   145 - regression test for arithmetic error.
[OK]                ED25519 test vectors                               144   145 - regression test for arithmetic error.
 ...                ECDH SECP256K1 test vectors                          0   1 - normal case.
[OK]                ECDH SECP256K1 test vectors                          0   1 - normal case.
 ...                ECDH SECP256K1 test vectors                          1   2 - compressed public key.
[OK]                ECDH SECP256K1 test vectors                          1   2 - compressed public key.
 ...                ECDH SECP256K1 test vectors                          2   3 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                          2   3 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                          3   4 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                          3   4 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                          4   5 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                          4   5 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                          5   6 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                          5   6 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                          6   7 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                          6   7 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                          7   8 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                          7   8 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                          8   9 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                          8   9 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                          9   10 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                          9   10 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                         10   11 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                         10   11 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                         11   12 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                         11   12 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                         12   13 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                         12   13 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                         13   14 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                         13   14 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                         14   15 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                         14   15 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                         15   16 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                         15   16 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                         16   17 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                         16   17 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                         17   18 - edge case for shared secret.
[OK]                ECDH SECP256K1 test vectors                         17   18 - edge case for shared secret.
 ...                ECDH SECP256K1 test vectors                         18   19 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDH SECP256K1 test vectors                         18   19 - y-coordinate of the public key has many trailing 1's.
 ...                ECDH SECP256K1 test vectors                         19   20 - y-coordinate of the public key is small.
[OK]                ECDH SECP256K1 test vectors                         19   20 - y-coordinate of the public key is small.
 ...                ECDH SECP256K1 test vectors                         20   21 - y-coordinate of the public key is small.
[OK]                ECDH SECP256K1 test vectors                         20   21 - y-coordinate of the public key is small.
 ...                ECDH SECP256K1 test vectors                         21   22 - y-coordinate of the public key is large.
[OK]                ECDH SECP256K1 test vectors                         21   22 - y-coordinate of the public key is large.
 ...                ECDH SECP256K1 test vectors                         22   23 - y-coordinate of the public key is large.
[OK]                ECDH SECP256K1 test vectors                         22   23 - y-coordinate of the public key is large.
 ...                ECDH SECP256K1 test vectors                         23   24 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDH SECP256K1 test vectors                         23   24 - y-coordinate of the public key has many trailing 0's.
 ...                ECDH SECP256K1 test vectors                         24   25 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         24   25 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         25   26 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         25   26 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         26   27 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         26   27 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         27   28 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         27   28 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         28   29 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         28   29 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         29   30 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         29   30 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         30   31 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         30   31 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         31   32 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         31   32 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         32   33 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         32   33 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         33   34 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         33   34 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         34   35 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         34   35 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         35   36 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         35   36 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         36   37 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         36   37 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         37   38 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         37   38 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         38   39 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         38   39 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         39   40 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         39   40 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         40   41 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         40   41 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         41   42 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         41   42 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         42   43 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         42   43 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         43   44 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         43   44 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         44   45 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         44   45 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         45   46 - edge cases for ephemeral key.
[OK]                ECDH SECP256K1 test vectors                         45   46 - edge cases for ephemeral key.
 ...                ECDH SECP256K1 test vectors                         46   47 - point with coordinate x = 1.
[OK]                ECDH SECP256K1 test vectors                         46   47 - point with coordinate x = 1.
 ...                ECDH SECP256K1 test vectors                         47   48 - point with coordinate x = 1.
[OK]                ECDH SECP256K1 test vectors                         47   48 - point with coordinate x = 1.
 ...                ECDH SECP256K1 test vectors                         48   49 - point with coordinate x = 1.
[OK]                ECDH SECP256K1 test vectors                         48   49 - point with coordinate x = 1.
 ...                ECDH SECP256K1 test vectors                         49   50 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         49   50 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         50   51 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         50   51 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         51   52 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         51   52 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         52   53 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         52   53 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         53   54 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         53   54 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         54   55 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         54   55 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         55   56 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         55   56 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         56   57 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         56   57 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         57   58 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         57   58 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         58   59 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         58   59 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         59   60 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         59   60 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         60   61 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         60   61 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         61   62 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         61   62 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         62   63 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         62   63 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         63   64 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         63   64 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         64   65 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         64   65 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         65   66 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                         65   66 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                         66   67 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                         66   67 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                         67   68 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                         67   68 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                         68   69 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                         68   69 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                         69   70 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                         69   70 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                         70   71 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                         70   71 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                         71   72 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                         71   72 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                         72   73 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                         72   73 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                         73   74 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                         73   74 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                         74   75 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                         74   75 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                         75   76 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                         75   76 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                         76   77 - point with coordinate y = 1.
[OK]                ECDH SECP256K1 test vectors                         76   77 - point with coordinate y = 1.
 ...                ECDH SECP256K1 test vectors                         77   78 - point with coordinate y = 1.
[OK]                ECDH SECP256K1 test vectors                         77   78 - point with coordinate y = 1.
 ...                ECDH SECP256K1 test vectors                         78   79 - point with coordinate y = 1.
[OK]                ECDH SECP256K1 test vectors                         78   79 - point with coordinate y = 1.
 ...                ECDH SECP256K1 test vectors                         79   80 - point with coordinate y = 1.
[OK]                ECDH SECP256K1 test vectors                         79   80 - point with coordinate y = 1.
 ...                ECDH SECP256K1 test vectors                         80   81 - point with coordinate y = 1.
[OK]                ECDH SECP256K1 test vectors                         80   81 - point with coordinate y = 1.
 ...                ECDH SECP256K1 test vectors                         81   82 - point with coordinate y = 1.
[OK]                ECDH SECP256K1 test vectors                         81   82 - point with coordinate y = 1.
 ...                ECDH SECP256K1 test vectors                         82   83 - point with coordinate y = 1.
[OK]                ECDH SECP256K1 test vectors                         82   83 - point with coordinate y = 1.
 ...                ECDH SECP256K1 test vectors                         83   84 - point with coordinate y = 1.
[OK]                ECDH SECP256K1 test vectors                         83   84 - point with coordinate y = 1.
 ...                ECDH SECP256K1 test vectors                         84   85 - point with coordinate y = 1.
[OK]                ECDH SECP256K1 test vectors                         84   85 - point with coordinate y = 1.
 ...                ECDH SECP256K1 test vectors                         85   86 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         85   86 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         86   87 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         86   87 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         87   88 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         87   88 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         88   89 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         88   89 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         89   90 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         89   90 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         90   91 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         90   91 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         91   92 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         91   92 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         92   93 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         92   93 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         93   94 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         93   94 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         94   95 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         94   95 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         95   96 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         95   96 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         96   97 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         96   97 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         97   98 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         97   98 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         98   99 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         98   99 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                         99   100 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                         99   100 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        100   101 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        100   101 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        101   102 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        101   102 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        102   103 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        102   103 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        103   104 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        103   104 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        104   105 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        104   105 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        105   106 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        105   106 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        106   107 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        106   107 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        107   108 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        107   108 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        108   109 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        108   109 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        109   110 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        109   110 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        110   111 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        110   111 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        111   112 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        111   112 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        112   113 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        112   113 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        113   114 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        113   114 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        114   115 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        114   115 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        115   116 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        115   116 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        116   117 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        116   117 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        117   118 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        117   118 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        118   119 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        118   119 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        119   120 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        119   120 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        120   121 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        120   121 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        121   122 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        121   122 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        122   123 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        122   123 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        123   124 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        123   124 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        124   125 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        124   125 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        125   126 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        125   126 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        126   127 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        126   127 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        127   128 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        127   128 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        128   129 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        128   129 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        129   130 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        129   130 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        130   131 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        130   131 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        131   132 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        131   132 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        132   133 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH SECP256K1 test vectors                        132   133 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH SECP256K1 test vectors                        133   134 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        133   134 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        134   135 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        134   135 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        135   136 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        135   136 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        136   137 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        136   137 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        137   138 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        137   138 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        138   139 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        138   139 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        139   140 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        139   140 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        140   141 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        140   141 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        141   142 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        141   142 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        142   143 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        142   143 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        143   144 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        143   144 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        144   145 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        144   145 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        145   146 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        145   146 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        146   147 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        146   147 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        147   148 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        147   148 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        148   149 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        148   149 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        149   150 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        149   150 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        150   151 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        150   151 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        151   152 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        151   152 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        152   153 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        152   153 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        153   154 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        153   154 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        154   155 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        154   155 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        155   156 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        155   156 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        156   157 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        156   157 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        157   158 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        157   158 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        158   159 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        158   159 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        159   160 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        159   160 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        160   161 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        160   161 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        161   162 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        161   162 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        162   163 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        162   163 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        163   164 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        163   164 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        164   165 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        164   165 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        165   166 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH SECP256K1 test vectors                        165   166 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH SECP256K1 test vectors                        166   167 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        166   167 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        167   168 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        167   168 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        168   169 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        168   169 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        169   170 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        169   170 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        170   171 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        170   171 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        171   172 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        171   172 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        172   173 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        172   173 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        173   174 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        173   174 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        174   175 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        174   175 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        175   176 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        175   176 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        176   177 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        176   177 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        177   178 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        177   178 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        178   179 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        178   179 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        179   180 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        179   180 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        180   181 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        180   181 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        181   182 - edge case private key.
[OK]                ECDH SECP256K1 test vectors                        181   182 - edge case private key.
 ...                ECDH SECP256K1 test vectors                        182   183 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        182   183 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        183   184 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        183   184 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        184   185 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        184   185 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        185   186 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        185   186 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        186   187 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        186   187 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        187   188 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        187   188 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        188   189 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        188   189 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        189   190 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        189   190 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        190   191 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        190   191 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        191   192 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        191   192 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        192   193 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        192   193 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        193   194 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        193   194 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        194   195 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        194   195 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        195   196 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        195   196 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        196   197 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        196   197 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        197   198 - point is not on curve.
[OK]                ECDH SECP256K1 test vectors                        197   198 - point is not on curve.
 ...                ECDH SECP256K1 test vectors                        198   199 - public key has invalid point of order 2 on secp256r1.  The point of the public key is a valid on secp256k1.
[OK]                ECDH SECP256K1 test vectors                        198   199 - public key has invalid point of order 2 on secp256r1.  The point of the public key is a valid on secp256k1.
 ...                ECDH SECP256K1 test vectors                        199   200 - public key has invalid point of order 2 on FRP256v1.  The point of the public key is a valid on secp256k1.
[OK]                ECDH SECP256K1 test vectors                        199   200 - public key has invalid point of order 2 on FRP256v1.  The point of the public key is a valid on secp256k1.
 ...                ECDH SECP256K1 test vectors                        200   201 - .
[OK]                ECDH SECP256K1 test vectors                        200   201 - .
 ...                ECDH SECP256K1 test vectors                        201   202 - public point not on curve.
[OK]                ECDH SECP256K1 test vectors                        201   202 - public point not on curve.
 ...                ECDH SECP256K1 test vectors                        202   203 - public point = (0,0).
[OK]                ECDH SECP256K1 test vectors                        202   203 - public point = (0,0).
 ...                ECDH SECP256K1 test vectors                        203   216 - using secp224r1.
[OK]                ECDH SECP256K1 test vectors                        203   216 - using secp224r1.
 ...                ECDH SECP256K1 test vectors                        204   217 - using secp256r1.
[OK]                ECDH SECP256K1 test vectors                        204   217 - using secp256r1.
 ...                ECDH SECP256K1 test vectors                        205   220 - Public key uses wrong curve: secp224r1.
[OK]                ECDH SECP256K1 test vectors                        205   220 - Public key uses wrong curve: secp224r1.
 ...                ECDH SECP256K1 test vectors                        206   221 - Public key uses wrong curve: secp256r1.
[OK]                ECDH SECP256K1 test vectors                        206   221 - Public key uses wrong curve: secp256r1.
 ...                ECDH SECP256K1 test vectors                        207   222 - Public key uses wrong curve: secp384r1.
[OK]                ECDH SECP256K1 test vectors                        207   222 - Public key uses wrong curve: secp384r1.
 ...                ECDH SECP256K1 test vectors                        208   223 - Public key uses wrong curve: secp521r1.
[OK]                ECDH SECP256K1 test vectors                        208   223 - Public key uses wrong curve: secp521r1.
 ...                ECDH SECP256K1 test vectors                        209   224 - Public key uses wrong curve: secp224k1.
[OK]                ECDH SECP256K1 test vectors                        209   224 - Public key uses wrong curve: secp224k1.
 ...                ECDH SECP256K1 test vectors                        210   225 - Public key uses wrong curve: brainpoolP224r1.
[OK]                ECDH SECP256K1 test vectors                        210   225 - Public key uses wrong curve: brainpoolP224r1.
 ...                ECDH SECP256K1 test vectors                        211   226 - Public key uses wrong curve: brainpoolP256r1.
[OK]                ECDH SECP256K1 test vectors                        211   226 - Public key uses wrong curve: brainpoolP256r1.
 ...                ECDH SECP256K1 test vectors                        212   227 - Public key uses wrong curve: brainpoolP320r1.
[OK]                ECDH SECP256K1 test vectors                        212   227 - Public key uses wrong curve: brainpoolP320r1.
 ...                ECDH SECP256K1 test vectors                        213   228 - Public key uses wrong curve: brainpoolP384r1.
[OK]                ECDH SECP256K1 test vectors                        213   228 - Public key uses wrong curve: brainpoolP384r1.
 ...                ECDH SECP256K1 test vectors                        214   229 - Public key uses wrong curve: brainpoolP512r1.
[OK]                ECDH SECP256K1 test vectors                        214   229 - Public key uses wrong curve: brainpoolP512r1.
 ...                ECDH SECP256K1 test vectors                        215   230 - Public key uses wrong curve: brainpoolP224t1.
[OK]                ECDH SECP256K1 test vectors                        215   230 - Public key uses wrong curve: brainpoolP224t1.
 ...                ECDH SECP256K1 test vectors                        216   231 - Public key uses wrong curve: brainpoolP256t1.
[OK]                ECDH SECP256K1 test vectors                        216   231 - Public key uses wrong curve: brainpoolP256t1.
 ...                ECDH SECP256K1 test vectors                        217   232 - Public key uses wrong curve: brainpoolP320t1.
[OK]                ECDH SECP256K1 test vectors                        217   232 - Public key uses wrong curve: brainpoolP320t1.
 ...                ECDH SECP256K1 test vectors                        218   233 - Public key uses wrong curve: brainpoolP384t1.
[OK]                ECDH SECP256K1 test vectors                        218   233 - Public key uses wrong curve: brainpoolP384t1.
 ...                ECDH SECP256K1 test vectors                        219   234 - Public key uses wrong curve: brainpoolP512t1.
[OK]                ECDH SECP256K1 test vectors                        219   234 - Public key uses wrong curve: brainpoolP512t1.
 ...                ECDH SECP256K1 test vectors                        220   235 - Public key uses wrong curve: FRP256v1.
[OK]                ECDH SECP256K1 test vectors                        220   235 - Public key uses wrong curve: FRP256v1.
 ...                ECDH SECP256K1 test vectors                        221   236 - invalid public key.
[OK]                ECDH SECP256K1 test vectors                        221   236 - invalid public key.
 ...                ECDH SECP256K1 test vectors                        222   237 - public key is a low order point on twist.
[OK]                ECDH SECP256K1 test vectors                        222   237 - public key is a low order point on twist.
 ...                ECDH SECP256K1 test vectors                        223   238 - public key is a low order point on twist.
[OK]                ECDH SECP256K1 test vectors                        223   238 - public key is a low order point on twist.
 ...                ECDSA SECP256K1 test vectors (SHA256)                0   0 - valid.
[OK]                ECDSA SECP256K1 test vectors (SHA256)                0   0 - valid.
 ...                ECDSA SECP256K1 test vectors (SHA256)                1   1 - signature malleability.
[OK]                ECDSA SECP256K1 test vectors (SHA256)                1   1 - signature malleability.
 ...                ECDSA SECP256K1 test vectors (SHA256)                2   2 - Legacy:ASN encoding of r misses leading 0.
[OK]                ECDSA SECP256K1 test vectors (SHA256)                2   2 - Legacy:ASN encoding of r misses leading 0.
 ...                ECDSA SECP256K1 test vectors (SHA256)                3   3 - valid.
[OK]                ECDSA SECP256K1 test vectors (SHA256)                3   3 - valid.
 ...                ECDSA SECP256K1 test vectors (SHA256)                4   4 - long form encoding of length of sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)                4   4 - long form encoding of length of sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)                5   5 - length of sequence contains leading 0.
[OK]                ECDSA SECP256K1 test vectors (SHA256)                5   5 - length of sequence contains leading 0.
 ...                ECDSA SECP256K1 test vectors (SHA256)                6   6 - wrong length of sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)                6   6 - wrong length of sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)                7   7 - wrong length of sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)                7   7 - wrong length of sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)                8   8 - uint32 overflow in length of sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)                8   8 - uint32 overflow in length of sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)                9   9 - uint64 overflow in length of sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)                9   9 - uint64 overflow in length of sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               10   10 - length of sequence = 2**31 - 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               10   10 - length of sequence = 2**31 - 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)               11   11 - length of sequence = 2**32 - 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               11   11 - length of sequence = 2**32 - 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)               12   12 - length of sequence = 2**40 - 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               12   12 - length of sequence = 2**40 - 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)               13   13 - length of sequence = 2**64 - 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               13   13 - length of sequence = 2**64 - 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)               14   14 - incorrect length of sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               14   14 - incorrect length of sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               15   15 - indefinite length without termination.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               15   15 - indefinite length without termination.
 ...                ECDSA SECP256K1 test vectors (SHA256)               16   16 - indefinite length without termination.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               16   16 - indefinite length without termination.
 ...                ECDSA SECP256K1 test vectors (SHA256)               17   17 - indefinite length without termination.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               17   17 - indefinite length without termination.
 ...                ECDSA SECP256K1 test vectors (SHA256)               18   18 - removing sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               18   18 - removing sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               19   19 - lonely sequence tag.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               19   19 - lonely sequence tag.
 ...                ECDSA SECP256K1 test vectors (SHA256)               20   20 - appending 0's to sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               20   20 - appending 0's to sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               21   21 - prepending 0's to sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               21   21 - prepending 0's to sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               22   22 - appending unused 0's to sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               22   22 - appending unused 0's to sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               23   23 - appending null value to sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               23   23 - appending null value to sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               24   24 - including garbage.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               24   24 - including garbage.
 ...                ECDSA SECP256K1 test vectors (SHA256)               25   25 - including garbage.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               25   25 - including garbage.
 ...                ECDSA SECP256K1 test vectors (SHA256)               26   26 - including garbage.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               26   26 - including garbage.
 ...                ECDSA SECP256K1 test vectors (SHA256)               27   27 - including garbage.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               27   27 - including garbage.
 ...                ECDSA SECP256K1 test vectors (SHA256)               28   28 - including garbage.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               28   28 - including garbage.
 ...                ECDSA SECP256K1 test vectors (SHA256)               29   29 - including garbage.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               29   29 - including garbage.
 ...                ECDSA SECP256K1 test vectors (SHA256)               30   30 - including garbage.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               30   30 - including garbage.
 ...                ECDSA SECP256K1 test vectors (SHA256)               31   31 - including garbage.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               31   31 - including garbage.
 ...                ECDSA SECP256K1 test vectors (SHA256)               32   32 - including garbage.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               32   32 - including garbage.
 ...                ECDSA SECP256K1 test vectors (SHA256)               33   33 - including undefined tags.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               33   33 - including undefined tags.
 ...                ECDSA SECP256K1 test vectors (SHA256)               34   34 - including undefined tags.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               34   34 - including undefined tags.
 ...                ECDSA SECP256K1 test vectors (SHA256)               35   35 - including undefined tags.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               35   35 - including undefined tags.
 ...                ECDSA SECP256K1 test vectors (SHA256)               36   36 - including undefined tags.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               36   36 - including undefined tags.
 ...                ECDSA SECP256K1 test vectors (SHA256)               37   37 - including undefined tags.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               37   37 - including undefined tags.
 ...                ECDSA SECP256K1 test vectors (SHA256)               38   38 - including undefined tags.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               38   38 - including undefined tags.
 ...                ECDSA SECP256K1 test vectors (SHA256)               39   39 - truncated length of sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               39   39 - truncated length of sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               40   40 - using composition with indefinite length.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               40   40 - using composition with indefinite length.
 ...                ECDSA SECP256K1 test vectors (SHA256)               41   41 - using composition with indefinite length.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               41   41 - using composition with indefinite length.
 ...                ECDSA SECP256K1 test vectors (SHA256)               42   42 - using composition with indefinite length.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               42   42 - using composition with indefinite length.
 ...                ECDSA SECP256K1 test vectors (SHA256)               43   43 - using composition with wrong tag.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               43   43 - using composition with wrong tag.
 ...                ECDSA SECP256K1 test vectors (SHA256)               44   44 - using composition with wrong tag.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               44   44 - using composition with wrong tag.
 ...                ECDSA SECP256K1 test vectors (SHA256)               45   45 - using composition with wrong tag.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               45   45 - using composition with wrong tag.
 ...                ECDSA SECP256K1 test vectors (SHA256)               46   46 - Replacing sequence with NULL.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               46   46 - Replacing sequence with NULL.
 ...                ECDSA SECP256K1 test vectors (SHA256)               47   47 - changing tag value of sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               47   47 - changing tag value of sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               48   48 - changing tag value of sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               48   48 - changing tag value of sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               49   49 - changing tag value of sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               49   49 - changing tag value of sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               50   50 - changing tag value of sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               50   50 - changing tag value of sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               51   51 - changing tag value of sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               51   51 - changing tag value of sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               52   52 - dropping value of sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               52   52 - dropping value of sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               53   53 - using composition for sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               53   53 - using composition for sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               54   54 - truncated sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               54   54 - truncated sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               55   55 - truncated sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               55   55 - truncated sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               56   56 - indefinite length.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               56   56 - indefinite length.
 ...                ECDSA SECP256K1 test vectors (SHA256)               57   57 - indefinite length with truncated delimiter.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               57   57 - indefinite length with truncated delimiter.
 ...                ECDSA SECP256K1 test vectors (SHA256)               58   58 - indefinite length with additional element.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               58   58 - indefinite length with additional element.
 ...                ECDSA SECP256K1 test vectors (SHA256)               59   59 - indefinite length with truncated element.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               59   59 - indefinite length with truncated element.
 ...                ECDSA SECP256K1 test vectors (SHA256)               60   60 - indefinite length with garbage.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               60   60 - indefinite length with garbage.
 ...                ECDSA SECP256K1 test vectors (SHA256)               61   61 - indefinite length with nonempty EOC.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               61   61 - indefinite length with nonempty EOC.
 ...                ECDSA SECP256K1 test vectors (SHA256)               62   62 - prepend empty sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               62   62 - prepend empty sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               63   63 - append empty sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               63   63 - append empty sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               64   64 - append garbage with high tag number.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               64   64 - append garbage with high tag number.
 ...                ECDSA SECP256K1 test vectors (SHA256)               65   65 - sequence of sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               65   65 - sequence of sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               66   66 - truncated sequence: removed last 1 elements.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               66   66 - truncated sequence: removed last 1 elements.
 ...                ECDSA SECP256K1 test vectors (SHA256)               67   67 - repeating element in sequence.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               67   67 - repeating element in sequence.
 ...                ECDSA SECP256K1 test vectors (SHA256)               68   68 - long form encoding of length of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               68   68 - long form encoding of length of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               69   69 - long form encoding of length of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               69   69 - long form encoding of length of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               70   70 - length of integer contains leading 0.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               70   70 - length of integer contains leading 0.
 ...                ECDSA SECP256K1 test vectors (SHA256)               71   71 - length of integer contains leading 0.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               71   71 - length of integer contains leading 0.
 ...                ECDSA SECP256K1 test vectors (SHA256)               72   72 - wrong length of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               72   72 - wrong length of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               73   73 - wrong length of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               73   73 - wrong length of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               74   74 - wrong length of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               74   74 - wrong length of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               75   75 - wrong length of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               75   75 - wrong length of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               76   76 - uint32 overflow in length of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               76   76 - uint32 overflow in length of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               77   77 - uint32 overflow in length of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               77   77 - uint32 overflow in length of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               78   78 - uint64 overflow in length of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               78   78 - uint64 overflow in length of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               79   79 - uint64 overflow in length of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               79   79 - uint64 overflow in length of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               80   80 - length of integer = 2**31 - 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               80   80 - length of integer = 2**31 - 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)               81   81 - length of integer = 2**31 - 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               81   81 - length of integer = 2**31 - 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)               82   82 - length of integer = 2**32 - 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               82   82 - length of integer = 2**32 - 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)               83   83 - length of integer = 2**32 - 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               83   83 - length of integer = 2**32 - 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)               84   84 - length of integer = 2**40 - 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               84   84 - length of integer = 2**40 - 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)               85   85 - length of integer = 2**40 - 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               85   85 - length of integer = 2**40 - 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)               86   86 - length of integer = 2**64 - 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               86   86 - length of integer = 2**64 - 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)               87   87 - length of integer = 2**64 - 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               87   87 - length of integer = 2**64 - 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)               88   88 - incorrect length of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               88   88 - incorrect length of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               89   89 - incorrect length of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               89   89 - incorrect length of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               90   90 - removing integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               90   90 - removing integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               91   91 - lonely integer tag.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               91   91 - lonely integer tag.
 ...                ECDSA SECP256K1 test vectors (SHA256)               92   92 - lonely integer tag.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               92   92 - lonely integer tag.
 ...                ECDSA SECP256K1 test vectors (SHA256)               93   93 - appending 0's to integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               93   93 - appending 0's to integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               94   94 - appending 0's to integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               94   94 - appending 0's to integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               95   95 - prepending 0's to integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               95   95 - prepending 0's to integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               96   96 - prepending 0's to integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               96   96 - prepending 0's to integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               97   97 - appending unused 0's to integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               97   97 - appending unused 0's to integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               98   98 - appending null value to integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               98   98 - appending null value to integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)               99   99 - appending null value to integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)               99   99 - appending null value to integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              100   100 - truncated length of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              100   100 - truncated length of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              101   101 - truncated length of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              101   101 - truncated length of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              102   102 - Replacing integer with NULL.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              102   102 - Replacing integer with NULL.
 ...                ECDSA SECP256K1 test vectors (SHA256)              103   103 - Replacing integer with NULL.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              103   103 - Replacing integer with NULL.
 ...                ECDSA SECP256K1 test vectors (SHA256)              104   104 - changing tag value of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              104   104 - changing tag value of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              105   105 - changing tag value of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              105   105 - changing tag value of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              106   106 - changing tag value of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              106   106 - changing tag value of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              107   107 - changing tag value of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              107   107 - changing tag value of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              108   108 - changing tag value of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              108   108 - changing tag value of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              109   109 - changing tag value of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              109   109 - changing tag value of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              110   110 - changing tag value of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              110   110 - changing tag value of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              111   111 - changing tag value of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              111   111 - changing tag value of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              112   112 - changing tag value of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              112   112 - changing tag value of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              113   113 - changing tag value of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              113   113 - changing tag value of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              114   114 - dropping value of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              114   114 - dropping value of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              115   115 - dropping value of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              115   115 - dropping value of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              116   116 - using composition for integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              116   116 - using composition for integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              117   117 - using composition for integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              117   117 - using composition for integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              118   118 - modify first byte of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              118   118 - modify first byte of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              119   119 - modify first byte of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              119   119 - modify first byte of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              120   120 - modify last byte of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              120   120 - modify last byte of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              121   121 - modify last byte of integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              121   121 - modify last byte of integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              122   122 - truncated integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              122   122 - truncated integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              123   123 - truncated integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              123   123 - truncated integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              124   124 - truncated integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              124   124 - truncated integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              125   125 - leading ff in integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              125   125 - leading ff in integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              126   126 - leading ff in integer.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              126   126 - leading ff in integer.
 ...                ECDSA SECP256K1 test vectors (SHA256)              127   127 - replaced integer by infinity.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              127   127 - replaced integer by infinity.
 ...                ECDSA SECP256K1 test vectors (SHA256)              128   128 - replaced integer by infinity.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              128   128 - replaced integer by infinity.
 ...                ECDSA SECP256K1 test vectors (SHA256)              129   129 - replacing integer with zero.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              129   129 - replacing integer with zero.
 ...                ECDSA SECP256K1 test vectors (SHA256)              130   130 - replacing integer with zero.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              130   130 - replacing integer with zero.
 ...                ECDSA SECP256K1 test vectors (SHA256)              131   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              131   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA SECP256K1 test vectors (SHA256)              132   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              132   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA SECP256K1 test vectors (SHA256)              133   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              133   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA SECP256K1 test vectors (SHA256)              134   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              134   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA SECP256K1 test vectors (SHA256)              135   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              135   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA SECP256K1 test vectors (SHA256)              136   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              136   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA SECP256K1 test vectors (SHA256)              137   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              137   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA SECP256K1 test vectors (SHA256)              138   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              138   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA SECP256K1 test vectors (SHA256)              139   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              139   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA SECP256K1 test vectors (SHA256)              140   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              140   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA SECP256K1 test vectors (SHA256)              141   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              141   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA SECP256K1 test vectors (SHA256)              142   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              142   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA SECP256K1 test vectors (SHA256)              143   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              143   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA SECP256K1 test vectors (SHA256)              144   144 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              144   144 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              145   145 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              145   145 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              146   146 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              146   146 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              147   147 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              147   147 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              148   148 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              148   148 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              149   149 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              149   149 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              150   150 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              150   150 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              151   151 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              151   151 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              152   152 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              152   152 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              153   153 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              153   153 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              154   154 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              154   154 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              155   155 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              155   155 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              156   156 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              156   156 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              157   157 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              157   157 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              158   158 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              158   158 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              159   159 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              159   159 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              160   160 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              160   160 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              161   161 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              161   161 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              162   162 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              162   162 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              163   163 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              163   163 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              164   164 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              164   164 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              165   165 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              165   165 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              166   166 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              166   166 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              167   167 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              167   167 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              168   168 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              168   168 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              169   169 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              169   169 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              170   170 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              170   170 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              171   171 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              171   171 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              172   172 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              172   172 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              173   173 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              173   173 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              174   174 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              174   174 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              175   175 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              175   175 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              176   176 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              176   176 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              177   177 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              177   177 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              178   178 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              178   178 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              179   179 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              179   179 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              180   180 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              180   180 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              181   181 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              181   181 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              182   182 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              182   182 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              183   183 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              183   183 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              184   184 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              184   184 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              185   185 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              185   185 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              186   186 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              186   186 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              187   187 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              187   187 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              188   188 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              188   188 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              189   189 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              189   189 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              190   190 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              190   190 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              191   191 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              191   191 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              192   192 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              192   192 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              193   193 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              193   193 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              194   194 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              194   194 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              195   195 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              195   195 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              196   196 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              196   196 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              197   197 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              197   197 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              198   198 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              198   198 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              199   199 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              199   199 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              200   200 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              200   200 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              201   201 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              201   201 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              202   202 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              202   202 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              203   203 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              203   203 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              204   204 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              204   204 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              205   205 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              205   205 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              206   206 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              206   206 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              207   207 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              207   207 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              208   208 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              208   208 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              209   209 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              209   209 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              210   210 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              210   210 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              211   211 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              211   211 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              212   212 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              212   212 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              213   213 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              213   213 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              214   214 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              214   214 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              215   215 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              215   215 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              216   216 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              216   216 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              217   217 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              217   217 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              218   218 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              218   218 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              219   219 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              219   219 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              220   220 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              220   220 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              221   221 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              221   221 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              222   222 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              222   222 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              223   223 - Signature with special case values for r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              223   223 - Signature with special case values for r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              224   224 - Signature encoding contains wrong types.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              224   224 - Signature encoding contains wrong types.
 ...                ECDSA SECP256K1 test vectors (SHA256)              225   225 - Signature encoding contains wrong types.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              225   225 - Signature encoding contains wrong types.
 ...                ECDSA SECP256K1 test vectors (SHA256)              226   226 - Signature encoding contains wrong types.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              226   226 - Signature encoding contains wrong types.
 ...                ECDSA SECP256K1 test vectors (SHA256)              227   227 - Signature encoding contains wrong types.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              227   227 - Signature encoding contains wrong types.
 ...                ECDSA SECP256K1 test vectors (SHA256)              228   228 - Signature encoding contains wrong types.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              228   228 - Signature encoding contains wrong types.
 ...                ECDSA SECP256K1 test vectors (SHA256)              229   229 - Signature encoding contains wrong types.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              229   229 - Signature encoding contains wrong types.
 ...                ECDSA SECP256K1 test vectors (SHA256)              230   230 - Edge case for Shamir multiplication.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              230   230 - Edge case for Shamir multiplication.
 ...                ECDSA SECP256K1 test vectors (SHA256)              231   231 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              231   231 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              232   232 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              232   232 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              233   233 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              233   233 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              234   234 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              234   234 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              235   235 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              235   235 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              236   236 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              236   236 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              237   237 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              237   237 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              238   238 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              238   238 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              239   239 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              239   239 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              240   240 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              240   240 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              241   241 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              241   241 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              242   242 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              242   242 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              243   243 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              243   243 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              244   244 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              244   244 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              245   245 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              245   245 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              246   246 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              246   246 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              247   247 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              247   247 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              248   248 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              248   248 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              249   249 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              249   249 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              250   250 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              250   250 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              251   251 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              251   251 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              252   252 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              252   252 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              253   253 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              253   253 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              254   254 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              254   254 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              255   255 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              255   255 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              256   256 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              256   256 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              257   257 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              257   257 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              258   258 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              258   258 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              259   259 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              259   259 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              260   260 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              260   260 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              261   261 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              261   261 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              262   262 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              262   262 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              263   263 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              263   263 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              264   264 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              264   264 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              265   265 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              265   265 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              266   266 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              266   266 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              267   267 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              267   267 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              268   268 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              268   268 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              269   269 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              269   269 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              270   270 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              270   270 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              271   271 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              271   271 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              272   272 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              272   272 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              273   273 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              273   273 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              274   274 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              274   274 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              275   275 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              275   275 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              276   276 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              276   276 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              277   277 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              277   277 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              278   278 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              278   278 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              279   279 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              279   279 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              280   280 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              280   280 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              281   281 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              281   281 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              282   282 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              282   282 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              283   283 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              283   283 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              284   284 - special case hash.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              284   284 - special case hash.
 ...                ECDSA SECP256K1 test vectors (SHA256)              285   285 - k*G has a large x-coordinate.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              285   285 - k*G has a large x-coordinate.
 ...                ECDSA SECP256K1 test vectors (SHA256)              286   286 - r too large.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              286   286 - r too large.
 ...                ECDSA SECP256K1 test vectors (SHA256)              287   287 - r,s are large.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              287   287 - r,s are large.
 ...                ECDSA SECP256K1 test vectors (SHA256)              288   288 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              288   288 - r and s^-1 have a large Hamming weight.
 ...                ECDSA SECP256K1 test vectors (SHA256)              289   289 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              289   289 - r and s^-1 have a large Hamming weight.
 ...                ECDSA SECP256K1 test vectors (SHA256)              290   290 - small r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              290   290 - small r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              291   291 - small r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              291   291 - small r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              292   292 - small r and s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              292   292 - small r and s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              293   293 - r is larger than n.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              293   293 - r is larger than n.
 ...                ECDSA SECP256K1 test vectors (SHA256)              294   294 - s is larger than n.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              294   294 - s is larger than n.
 ...                ECDSA SECP256K1 test vectors (SHA256)              295   295 - small r and s^-1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              295   295 - small r and s^-1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              296   296 - smallish r and s^-1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              296   296 - smallish r and s^-1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              297   297 - 100-bit r and small s^-1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              297   297 - 100-bit r and small s^-1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              298   298 - small r and 100 bit s^-1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              298   298 - small r and 100 bit s^-1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              299   299 - 100-bit r and s^-1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              299   299 - 100-bit r and s^-1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              300   300 - r and s^-1 are close to n.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              300   300 - r and s^-1 are close to n.
 ...                ECDSA SECP256K1 test vectors (SHA256)              301   301 - s == 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              301   301 - s == 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              302   302 - s == 0.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              302   302 - s == 0.
 ...                ECDSA SECP256K1 test vectors (SHA256)              303   303 - point at infinity during verify.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              303   303 - point at infinity during verify.
 ...                ECDSA SECP256K1 test vectors (SHA256)              304   304 - edge case for signature malleability.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              304   304 - edge case for signature malleability.
 ...                ECDSA SECP256K1 test vectors (SHA256)              305   305 - edge case for signature malleability.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              305   305 - edge case for signature malleability.
 ...                ECDSA SECP256K1 test vectors (SHA256)              306   306 - u1 == 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              306   306 - u1 == 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              307   307 - u1 == n - 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              307   307 - u1 == n - 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              308   308 - u2 == 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              308   308 - u2 == 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              309   309 - u2 == n - 1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              309   309 - u2 == n - 1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              310   310 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              310   310 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              311   311 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              311   311 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              312   312 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              312   312 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              313   313 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              313   313 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              314   314 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              314   314 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              315   315 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              315   315 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              316   316 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              316   316 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              317   317 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              317   317 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              318   318 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              318   318 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              319   319 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              319   319 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              320   320 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              320   320 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              321   321 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              321   321 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              322   322 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              322   322 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              323   323 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              323   323 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              324   324 - edge case for u1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              324   324 - edge case for u1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              325   325 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              325   325 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              326   326 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              326   326 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              327   327 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              327   327 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              328   328 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              328   328 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              329   329 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              329   329 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              330   330 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              330   330 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              331   331 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              331   331 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              332   332 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              332   332 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              333   333 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              333   333 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              334   334 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              334   334 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              335   335 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              335   335 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              336   336 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              336   336 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              337   337 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              337   337 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              338   338 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              338   338 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              339   339 - edge case for u2.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              339   339 - edge case for u2.
 ...                ECDSA SECP256K1 test vectors (SHA256)              340   340 - point duplication during verification.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              340   340 - point duplication during verification.
 ...                ECDSA SECP256K1 test vectors (SHA256)              341   341 - duplication bug.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              341   341 - duplication bug.
 ...                ECDSA SECP256K1 test vectors (SHA256)              342   342 - comparison with point at infinity .
[OK]                ECDSA SECP256K1 test vectors (SHA256)              342   342 - comparison with point at infinity .
 ...                ECDSA SECP256K1 test vectors (SHA256)              343   343 - extreme value for k and edgecase s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              343   343 - extreme value for k and edgecase s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              344   344 - extreme value for k and s^-1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              344   344 - extreme value for k and s^-1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              345   345 - extreme value for k and s^-1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              345   345 - extreme value for k and s^-1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              346   346 - extreme value for k and s^-1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              346   346 - extreme value for k and s^-1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              347   347 - extreme value for k and s^-1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              347   347 - extreme value for k and s^-1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              348   348 - extreme value for k.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              348   348 - extreme value for k.
 ...                ECDSA SECP256K1 test vectors (SHA256)              349   349 - extreme value for k and edgecase s.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              349   349 - extreme value for k and edgecase s.
 ...                ECDSA SECP256K1 test vectors (SHA256)              350   350 - extreme value for k and s^-1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              350   350 - extreme value for k and s^-1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              351   351 - extreme value for k and s^-1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              351   351 - extreme value for k and s^-1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              352   352 - extreme value for k and s^-1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              352   352 - extreme value for k and s^-1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              353   353 - extreme value for k and s^-1.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              353   353 - extreme value for k and s^-1.
 ...                ECDSA SECP256K1 test vectors (SHA256)              354   354 - extreme value for k.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              354   354 - extreme value for k.
 ...                ECDSA SECP256K1 test vectors (SHA256)              355   355 - testing point duplication.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              355   355 - testing point duplication.
 ...                ECDSA SECP256K1 test vectors (SHA256)              356   356 - testing point duplication.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              356   356 - testing point duplication.
 ...                ECDSA SECP256K1 test vectors (SHA256)              357   357 - testing point duplication.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              357   357 - testing point duplication.
 ...                ECDSA SECP256K1 test vectors (SHA256)              358   358 - testing point duplication.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              358   358 - testing point duplication.
 ...                ECDSA SECP256K1 test vectors (SHA256)              359   359 - pseudorandom signature.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              359   359 - pseudorandom signature.
 ...                ECDSA SECP256K1 test vectors (SHA256)              360   360 - pseudorandom signature.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              360   360 - pseudorandom signature.
 ...                ECDSA SECP256K1 test vectors (SHA256)              361   361 - pseudorandom signature.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              361   361 - pseudorandom signature.
 ...                ECDSA SECP256K1 test vectors (SHA256)              362   362 - pseudorandom signature.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              362   362 - pseudorandom signature.
 ...                ECDSA SECP256K1 test vectors (SHA256)              363   363 - y-coordinate of the public key is small.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              363   363 - y-coordinate of the public key is small.
 ...                ECDSA SECP256K1 test vectors (SHA256)              364   364 - y-coordinate of the public key is small.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              364   364 - y-coordinate of the public key is small.
 ...                ECDSA SECP256K1 test vectors (SHA256)              365   365 - y-coordinate of the public key is small.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              365   365 - y-coordinate of the public key is small.
 ...                ECDSA SECP256K1 test vectors (SHA256)              366   366 - y-coordinate of the public key is large.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              366   366 - y-coordinate of the public key is large.
 ...                ECDSA SECP256K1 test vectors (SHA256)              367   367 - y-coordinate of the public key is large.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              367   367 - y-coordinate of the public key is large.
 ...                ECDSA SECP256K1 test vectors (SHA256)              368   368 - y-coordinate of the public key is large.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              368   368 - y-coordinate of the public key is large.
 ...                ECDSA SECP256K1 test vectors (SHA256)              369   369 - x-coordinate of the public key is small.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              369   369 - x-coordinate of the public key is small.
 ...                ECDSA SECP256K1 test vectors (SHA256)              370   370 - x-coordinate of the public key is small.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              370   370 - x-coordinate of the public key is small.
 ...                ECDSA SECP256K1 test vectors (SHA256)              371   371 - x-coordinate of the public key is small.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              371   371 - x-coordinate of the public key is small.
 ...                ECDSA SECP256K1 test vectors (SHA256)              372   372 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              372   372 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA SECP256K1 test vectors (SHA256)              373   373 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              373   373 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA SECP256K1 test vectors (SHA256)              374   374 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              374   374 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA SECP256K1 test vectors (SHA256)              375   375 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              375   375 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA SECP256K1 test vectors (SHA256)              376   376 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              376   376 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA SECP256K1 test vectors (SHA256)              377   377 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              377   377 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA SECP256K1 test vectors (SHA256)              378   378 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              378   378 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA SECP256K1 test vectors (SHA256)              379   379 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              379   379 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA SECP256K1 test vectors (SHA256)              380   380 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA SECP256K1 test vectors (SHA256)              380   380 - x-coordinate of the public key has many trailing 0's.
 ...                ECDH BrainpoolP256r1 test vectors                    0   1 - normal case.
[OK]                ECDH BrainpoolP256r1 test vectors                    0   1 - normal case.
 ...                ECDH BrainpoolP256r1 test vectors                    1   2 - compressed public key.
[OK]                ECDH BrainpoolP256r1 test vectors                    1   2 - compressed public key.
 ...                ECDH BrainpoolP256r1 test vectors                    2   3 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                    2   3 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                    3   4 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                    3   4 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                    4   5 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                    4   5 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                    5   6 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                    5   6 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                    6   7 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                    6   7 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                    7   8 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                    7   8 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                    8   9 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                    8   9 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                    9   10 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                    9   10 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                   10   11 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                   10   11 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                   11   12 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                   11   12 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                   12   13 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                   12   13 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                   13   14 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                   13   14 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                   14   15 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                   14   15 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                   15   16 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                   15   16 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                   16   17 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                   16   17 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                   17   18 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                   17   18 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                   18   19 - edge case for shared secret.
[OK]                ECDH BrainpoolP256r1 test vectors                   18   19 - edge case for shared secret.
 ...                ECDH BrainpoolP256r1 test vectors                   19   20 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDH BrainpoolP256r1 test vectors                   19   20 - y-coordinate of the public key has many trailing 1's.
 ...                ECDH BrainpoolP256r1 test vectors                   20   21 - y-coordinate of the public key is small.
[OK]                ECDH BrainpoolP256r1 test vectors                   20   21 - y-coordinate of the public key is small.
 ...                ECDH BrainpoolP256r1 test vectors                   21   22 - y-coordinate of the public key is large.
[OK]                ECDH BrainpoolP256r1 test vectors                   21   22 - y-coordinate of the public key is large.
 ...                ECDH BrainpoolP256r1 test vectors                   22   23 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDH BrainpoolP256r1 test vectors                   22   23 - y-coordinate of the public key has many trailing 0's.
 ...                ECDH BrainpoolP256r1 test vectors                   23   24 - y-coordinate of the public key has many trailing 0's on brainpoolP256t1.
[OK]                ECDH BrainpoolP256r1 test vectors                   23   24 - y-coordinate of the public key has many trailing 0's on brainpoolP256t1.
 ...                ECDH BrainpoolP256r1 test vectors                   24   25 - y-coordinate of the public key has many trailing 0's on brainpoolP256t1.
[OK]                ECDH BrainpoolP256r1 test vectors                   24   25 - y-coordinate of the public key has many trailing 0's on brainpoolP256t1.
 ...                ECDH BrainpoolP256r1 test vectors                   25   26 - y-coordinate of the public key is small on brainpoolP256t1.
[OK]                ECDH BrainpoolP256r1 test vectors                   25   26 - y-coordinate of the public key is small on brainpoolP256t1.
 ...                ECDH BrainpoolP256r1 test vectors                   26   27 - y-coordinate of the public key is small on brainpoolP256t1.
[OK]                ECDH BrainpoolP256r1 test vectors                   26   27 - y-coordinate of the public key is small on brainpoolP256t1.
 ...                ECDH BrainpoolP256r1 test vectors                   27   28 - y-coordinate of the public key is large on brainpoolP256t1.
[OK]                ECDH BrainpoolP256r1 test vectors                   27   28 - y-coordinate of the public key is large on brainpoolP256t1.
 ...                ECDH BrainpoolP256r1 test vectors                   28   29 - y-coordinate of the public key is large on brainpoolP256t1.
[OK]                ECDH BrainpoolP256r1 test vectors                   28   29 - y-coordinate of the public key is large on brainpoolP256t1.
 ...                ECDH BrainpoolP256r1 test vectors                   29   30 - y-coordinate of the public key has many trailing 1's on brainpoolP256t1.
[OK]                ECDH BrainpoolP256r1 test vectors                   29   30 - y-coordinate of the public key has many trailing 1's on brainpoolP256t1.
 ...                ECDH BrainpoolP256r1 test vectors                   30   31 - y-coordinate of the public key has many trailing 1's on brainpoolP256t1.
[OK]                ECDH BrainpoolP256r1 test vectors                   30   31 - y-coordinate of the public key has many trailing 1's on brainpoolP256t1.
 ...                ECDH BrainpoolP256r1 test vectors                   31   32 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   31   32 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   32   33 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   32   33 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   33   34 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   33   34 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   34   35 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   34   35 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   35   36 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   35   36 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   36   37 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   36   37 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   37   38 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   37   38 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   38   39 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   38   39 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   39   40 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   39   40 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   40   41 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   40   41 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   41   42 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   41   42 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   42   43 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   42   43 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   43   44 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   43   44 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   44   45 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   44   45 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   45   46 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   45   46 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   46   47 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   46   47 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   47   48 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   47   48 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   48   49 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   48   49 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   49   50 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   49   50 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   50   51 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   50   51 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   51   52 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   51   52 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   52   53 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   52   53 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   53   54 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   53   54 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   54   55 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   54   55 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   55   56 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   55   56 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   56   57 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   56   57 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   57   58 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   57   58 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   58   59 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   58   59 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   59   60 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP256r1 test vectors                   59   60 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP256r1 test vectors                   60   61 - edge case for Jacobian and projective coordinates.
[OK]                ECDH BrainpoolP256r1 test vectors                   60   61 - edge case for Jacobian and projective coordinates.
 ...                ECDH BrainpoolP256r1 test vectors                   61   62 - edge case for Jacobian and projective coordinates.
[OK]                ECDH BrainpoolP256r1 test vectors                   61   62 - edge case for Jacobian and projective coordinates.
 ...                ECDH BrainpoolP256r1 test vectors                   62   63 - edge case for Jacobian and projective coordinates.
[OK]                ECDH BrainpoolP256r1 test vectors                   62   63 - edge case for Jacobian and projective coordinates.
 ...                ECDH BrainpoolP256r1 test vectors                   63   64 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   63   64 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   64   65 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   64   65 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   65   66 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   65   66 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   66   67 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   66   67 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   67   68 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   67   68 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   68   69 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   68   69 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   69   70 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   69   70 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   70   71 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   70   71 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   71   72 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   71   72 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   72   73 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   72   73 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   73   74 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   73   74 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   74   75 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   74   75 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   75   76 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   75   76 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   76   77 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   76   77 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   77   78 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   77   78 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   78   79 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   78   79 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   79   80 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   79   80 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   80   81 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   80   81 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   81   82 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   81   82 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   82   83 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   82   83 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   83   84 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   83   84 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   84   85 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   84   85 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   85   86 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   85   86 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   86   87 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   86   87 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   87   88 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   87   88 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   88   89 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   88   89 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   89   90 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   89   90 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   90   91 - point with coordinate x = -1.
[OK]                ECDH BrainpoolP256r1 test vectors                   90   91 - point with coordinate x = -1.
 ...                ECDH BrainpoolP256r1 test vectors                   91   92 - point with coordinate x = -1.
[OK]                ECDH BrainpoolP256r1 test vectors                   91   92 - point with coordinate x = -1.
 ...                ECDH BrainpoolP256r1 test vectors                   92   93 - point with coordinate x = -1.
[OK]                ECDH BrainpoolP256r1 test vectors                   92   93 - point with coordinate x = -1.
 ...                ECDH BrainpoolP256r1 test vectors                   93   94 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   93   94 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   94   95 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   94   95 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   95   96 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   95   96 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   96   97 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   96   97 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   97   98 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   97   98 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   98   99 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   98   99 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                   99   100 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                   99   100 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  100   101 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  100   101 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  101   102 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  101   102 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  102   103 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  102   103 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  103   104 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  103   104 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  104   105 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  104   105 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  105   106 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  105   106 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  106   107 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  106   107 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  107   108 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  107   108 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  108   109 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  108   109 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  109   110 - point with coordinate x = -1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  109   110 - point with coordinate x = -1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  110   111 - point with coordinate x = -1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  110   111 - point with coordinate x = -1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  111   112 - point with coordinate x = -1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  111   112 - point with coordinate x = -1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  112   113 - point with coordinate x = -1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  112   113 - point with coordinate x = -1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  113   114 - point with coordinate x = -1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  113   114 - point with coordinate x = -1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  114   115 - point with coordinate x = -1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  114   115 - point with coordinate x = -1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  115   116 - point with coordinate x = -1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  115   116 - point with coordinate x = -1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  116   117 - point with coordinate x = -1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  116   117 - point with coordinate x = -1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  117   118 - point with coordinate x = -1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  117   118 - point with coordinate x = -1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  118   119 - point with coordinate x = -1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  118   119 - point with coordinate x = -1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  119   120 - point with coordinate x = -1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  119   120 - point with coordinate x = -1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  120   121 - point with coordinate x = 1.
[OK]                ECDH BrainpoolP256r1 test vectors                  120   121 - point with coordinate x = 1.
 ...                ECDH BrainpoolP256r1 test vectors                  121   122 - point with coordinate x = 1.
[OK]                ECDH BrainpoolP256r1 test vectors                  121   122 - point with coordinate x = 1.
 ...                ECDH BrainpoolP256r1 test vectors                  122   123 - point with coordinate x = 1.
[OK]                ECDH BrainpoolP256r1 test vectors                  122   123 - point with coordinate x = 1.
 ...                ECDH BrainpoolP256r1 test vectors                  123   124 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  123   124 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  124   125 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  124   125 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  125   126 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  125   126 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  126   127 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  126   127 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  127   128 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  127   128 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  128   129 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  128   129 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  129   130 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  129   130 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  130   131 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  130   131 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  131   132 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  131   132 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  132   133 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  132   133 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  133   134 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  133   134 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  134   135 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  134   135 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  135   136 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  135   136 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  136   137 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  136   137 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  137   138 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  137   138 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  138   139 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  138   139 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  139   140 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  139   140 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  140   141 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  140   141 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  141   142 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  141   142 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  142   143 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  142   143 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  143   144 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  143   144 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  144   145 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  144   145 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  145   146 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  145   146 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  146   147 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  146   147 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  147   148 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  147   148 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  148   149 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  148   149 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  149   150 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  149   150 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  150   151 - point with coordinate y = 1.
[OK]                ECDH BrainpoolP256r1 test vectors                  150   151 - point with coordinate y = 1.
 ...                ECDH BrainpoolP256r1 test vectors                  151   152 - point with coordinate y = 1.
[OK]                ECDH BrainpoolP256r1 test vectors                  151   152 - point with coordinate y = 1.
 ...                ECDH BrainpoolP256r1 test vectors                  152   153 - point with coordinate y = 1.
[OK]                ECDH BrainpoolP256r1 test vectors                  152   153 - point with coordinate y = 1.
 ...                ECDH BrainpoolP256r1 test vectors                  153   154 - point with coordinate y = 1.
[OK]                ECDH BrainpoolP256r1 test vectors                  153   154 - point with coordinate y = 1.
 ...                ECDH BrainpoolP256r1 test vectors                  154   155 - point with coordinate y = 1.
[OK]                ECDH BrainpoolP256r1 test vectors                  154   155 - point with coordinate y = 1.
 ...                ECDH BrainpoolP256r1 test vectors                  155   156 - point with coordinate y = 1.
[OK]                ECDH BrainpoolP256r1 test vectors                  155   156 - point with coordinate y = 1.
 ...                ECDH BrainpoolP256r1 test vectors                  156   157 - point with coordinate y = 1.
[OK]                ECDH BrainpoolP256r1 test vectors                  156   157 - point with coordinate y = 1.
 ...                ECDH BrainpoolP256r1 test vectors                  157   158 - point with coordinate y = 1.
[OK]                ECDH BrainpoolP256r1 test vectors                  157   158 - point with coordinate y = 1.
 ...                ECDH BrainpoolP256r1 test vectors                  158   159 - point with coordinate y = 1.
[OK]                ECDH BrainpoolP256r1 test vectors                  158   159 - point with coordinate y = 1.
 ...                ECDH BrainpoolP256r1 test vectors                  159   160 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  159   160 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  160   161 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  160   161 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  161   162 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  161   162 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  162   163 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  162   163 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  163   164 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  163   164 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  164   165 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  164   165 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  165   166 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  165   166 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  166   167 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  166   167 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  167   168 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  167   168 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  168   169 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  168   169 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  169   170 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  169   170 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  170   171 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  170   171 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  171   172 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  171   172 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  172   173 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  172   173 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  173   174 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  173   174 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  174   175 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  174   175 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  175   176 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  175   176 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  176   177 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  176   177 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  177   178 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  177   178 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  178   179 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  178   179 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  179   180 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  179   180 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  180   181 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  180   181 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  181   182 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  181   182 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  182   183 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  182   183 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  183   184 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  183   184 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  184   185 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  184   185 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  185   186 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  185   186 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  186   187 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  186   187 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  187   188 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  187   188 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  188   189 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  188   189 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  189   190 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  189   190 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  190   191 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  190   191 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  191   192 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  191   192 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  192   193 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  192   193 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  193   194 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  193   194 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  194   195 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  194   195 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  195   196 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  195   196 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  196   197 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  196   197 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  197   198 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  197   198 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  198   199 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  198   199 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  199   200 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  199   200 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  200   201 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  200   201 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  201   202 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  201   202 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  202   203 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  202   203 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  203   204 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  203   204 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  204   205 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  204   205 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  205   206 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  205   206 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  206   207 - point with coordinate y = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  206   207 - point with coordinate y = 1 in left to right addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  207   208 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  207   208 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  208   209 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  208   209 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  209   210 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  209   210 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  210   211 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  210   211 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  211   212 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  211   212 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  212   213 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  212   213 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  213   214 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  213   214 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  214   215 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  214   215 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  215   216 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  215   216 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  216   217 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  216   217 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  217   218 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  217   218 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  218   219 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  218   219 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  219   220 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  219   220 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  220   221 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  220   221 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  221   222 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  221   222 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  222   223 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  222   223 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  223   224 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  223   224 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  224   225 - point with coordinate y = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  224   225 - point with coordinate y = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  225   226 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  225   226 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  226   227 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  226   227 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  227   228 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  227   228 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  228   229 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  228   229 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  229   230 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  229   230 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  230   231 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  230   231 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  231   232 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  231   232 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  232   233 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  232   233 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  233   234 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  233   234 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  234   235 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  234   235 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  235   236 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  235   236 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  236   237 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  236   237 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  237   238 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  237   238 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  238   239 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  238   239 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  239   240 - point with coordinate y = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP256r1 test vectors                  239   240 - point with coordinate y = 1 in right to left addition chain.
 ...                ECDH BrainpoolP256r1 test vectors                  240   241 - edge case private key.
[OK]                ECDH BrainpoolP256r1 test vectors                  240   241 - edge case private key.
 ...                ECDH BrainpoolP256r1 test vectors                  241   242 - edge case private key.
[OK]                ECDH BrainpoolP256r1 test vectors                  241   242 - edge case private key.
 ...                ECDH BrainpoolP256r1 test vectors                  242   243 - edge case private key.
[OK]                ECDH BrainpoolP256r1 test vectors                  242   243 - edge case private key.
 ...                ECDH BrainpoolP256r1 test vectors                  243   244 - edge case private key.
[OK]                ECDH BrainpoolP256r1 test vectors                  243   244 - edge case private key.
 ...                ECDH BrainpoolP256r1 test vectors                  244   245 - edge case private key.
[OK]                ECDH BrainpoolP256r1 test vectors                  244   245 - edge case private key.
 ...                ECDH BrainpoolP256r1 test vectors                  245   246 - edge case private key.
[OK]                ECDH BrainpoolP256r1 test vectors                  245   246 - edge case private key.
 ...                ECDH BrainpoolP256r1 test vectors                  246   247 - edge case private key.
[OK]                ECDH BrainpoolP256r1 test vectors                  246   247 - edge case private key.
 ...                ECDH BrainpoolP256r1 test vectors                  247   248 - edge case private key.
[OK]                ECDH BrainpoolP256r1 test vectors                  247   248 - edge case private key.
 ...                ECDH BrainpoolP256r1 test vectors                  248   249 - edge case private key.
[OK]                ECDH BrainpoolP256r1 test vectors                  248   249 - edge case private key.
 ...                ECDH BrainpoolP256r1 test vectors                  249   250 - edge case private key.
[OK]                ECDH BrainpoolP256r1 test vectors                  249   250 - edge case private key.
 ...                ECDH BrainpoolP256r1 test vectors                  250   251 - edge case private key.
[OK]                ECDH BrainpoolP256r1 test vectors                  250   251 - edge case private key.
 ...                ECDH BrainpoolP256r1 test vectors                  251   252 - edge case private key.
[OK]                ECDH BrainpoolP256r1 test vectors                  251   252 - edge case private key.
 ...                ECDH BrainpoolP256r1 test vectors                  252   253 - edge case private key.
[OK]                ECDH BrainpoolP256r1 test vectors                  252   253 - edge case private key.
 ...                ECDH BrainpoolP256r1 test vectors                  253   254 - edge case private key.
[OK]                ECDH BrainpoolP256r1 test vectors                  253   254 - edge case private key.
 ...                ECDH BrainpoolP256r1 test vectors                  254   255 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  254   255 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  255   256 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  255   256 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  256   257 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  256   257 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  257   258 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  257   258 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  258   259 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  258   259 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  259   260 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  259   260 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  260   261 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  260   261 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  261   262 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  261   262 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  262   263 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  262   263 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  263   264 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  263   264 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  264   265 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  264   265 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  265   266 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  265   266 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  266   267 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  266   267 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  267   268 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  267   268 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  268   269 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  268   269 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  269   270 - point is not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  269   270 - point is not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  270   271 - public key uses brainpoolP256t1 with a point shared with brainpoolP256r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  270   271 - public key uses brainpoolP256t1 with a point shared with brainpoolP256r1.
 ...                ECDH BrainpoolP256r1 test vectors                  271   272 - public key uses brainpoolP256t1 with a point shared with brainpoolP256r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  271   272 - public key uses brainpoolP256t1 with a point shared with brainpoolP256r1.
 ...                ECDH BrainpoolP256r1 test vectors                  272   273 - public key is a low order invalid point on brainpoolP256t1.  The point of the public key is a valid on brainpoolP256r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  272   273 - public key is a low order invalid point on brainpoolP256t1.  The point of the public key is a valid on brainpoolP256r1.
 ...                ECDH BrainpoolP256r1 test vectors                  273   274 - public key is a low order invalid point on brainpoolP256t1.  The point of the public key is a valid on brainpoolP256r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  273   274 - public key is a low order invalid point on brainpoolP256t1.  The point of the public key is a valid on brainpoolP256r1.
 ...                ECDH BrainpoolP256r1 test vectors                  274   275 - public key has invalid point of order 2 on secp256k1.  The point of the public key is a valid on brainpoolP256r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  274   275 - public key has invalid point of order 2 on secp256k1.  The point of the public key is a valid on brainpoolP256r1.
 ...                ECDH BrainpoolP256r1 test vectors                  275   276 - public key has invalid point of order 2 on FRP256v1.  The point of the public key is a valid on brainpoolP256r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  275   276 - public key has invalid point of order 2 on FRP256v1.  The point of the public key is a valid on brainpoolP256r1.
 ...                ECDH BrainpoolP256r1 test vectors                  276   277 - .
[OK]                ECDH BrainpoolP256r1 test vectors                  276   277 - .
 ...                ECDH BrainpoolP256r1 test vectors                  277   278 - public point not on curve.
[OK]                ECDH BrainpoolP256r1 test vectors                  277   278 - public point not on curve.
 ...                ECDH BrainpoolP256r1 test vectors                  278   279 - public point = (0,0).
[OK]                ECDH BrainpoolP256r1 test vectors                  278   279 - public point = (0,0).
 ...                ECDH BrainpoolP256r1 test vectors                  279   292 - using secp224r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  279   292 - using secp224r1.
 ...                ECDH BrainpoolP256r1 test vectors                  280   293 - using secp256r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  280   293 - using secp256r1.
 ...                ECDH BrainpoolP256r1 test vectors                  281   294 - using secp256k1.
[OK]                ECDH BrainpoolP256r1 test vectors                  281   294 - using secp256k1.
 ...                ECDH BrainpoolP256r1 test vectors                  282   297 - public key on isomorphic curve brainpoolP256t1.
[OK]                ECDH BrainpoolP256r1 test vectors                  282   297 - public key on isomorphic curve brainpoolP256t1.
 ...                ECDH BrainpoolP256r1 test vectors                  283   298 - Public key uses wrong curve: secp224r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  283   298 - Public key uses wrong curve: secp224r1.
 ...                ECDH BrainpoolP256r1 test vectors                  284   299 - Public key uses wrong curve: secp256r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  284   299 - Public key uses wrong curve: secp256r1.
 ...                ECDH BrainpoolP256r1 test vectors                  285   300 - Public key uses wrong curve: secp384r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  285   300 - Public key uses wrong curve: secp384r1.
 ...                ECDH BrainpoolP256r1 test vectors                  286   301 - Public key uses wrong curve: secp521r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  286   301 - Public key uses wrong curve: secp521r1.
 ...                ECDH BrainpoolP256r1 test vectors                  287   302 - Public key uses wrong curve: secp256k1.
[OK]                ECDH BrainpoolP256r1 test vectors                  287   302 - Public key uses wrong curve: secp256k1.
 ...                ECDH BrainpoolP256r1 test vectors                  288   303 - Public key uses wrong curve: secp224k1.
[OK]                ECDH BrainpoolP256r1 test vectors                  288   303 - Public key uses wrong curve: secp224k1.
 ...                ECDH BrainpoolP256r1 test vectors                  289   304 - Public key uses wrong curve: brainpoolP224r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  289   304 - Public key uses wrong curve: brainpoolP224r1.
 ...                ECDH BrainpoolP256r1 test vectors                  290   305 - Public key uses wrong curve: brainpoolP320r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  290   305 - Public key uses wrong curve: brainpoolP320r1.
 ...                ECDH BrainpoolP256r1 test vectors                  291   306 - Public key uses wrong curve: brainpoolP384r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  291   306 - Public key uses wrong curve: brainpoolP384r1.
 ...                ECDH BrainpoolP256r1 test vectors                  292   307 - Public key uses wrong curve: brainpoolP512r1.
[OK]                ECDH BrainpoolP256r1 test vectors                  292   307 - Public key uses wrong curve: brainpoolP512r1.
 ...                ECDH BrainpoolP256r1 test vectors                  293   308 - Public key uses wrong curve: brainpoolP224t1.
[OK]                ECDH BrainpoolP256r1 test vectors                  293   308 - Public key uses wrong curve: brainpoolP224t1.
 ...                ECDH BrainpoolP256r1 test vectors                  294   309 - Public key uses wrong curve: brainpoolP256t1.
[OK]                ECDH BrainpoolP256r1 test vectors                  294   309 - Public key uses wrong curve: brainpoolP256t1.
 ...                ECDH BrainpoolP256r1 test vectors                  295   310 - Public key uses wrong curve: brainpoolP320t1.
[OK]                ECDH BrainpoolP256r1 test vectors                  295   310 - Public key uses wrong curve: brainpoolP320t1.
 ...                ECDH BrainpoolP256r1 test vectors                  296   311 - Public key uses wrong curve: brainpoolP384t1.
[OK]                ECDH BrainpoolP256r1 test vectors                  296   311 - Public key uses wrong curve: brainpoolP384t1.
 ...                ECDH BrainpoolP256r1 test vectors                  297   312 - Public key uses wrong curve: brainpoolP512t1.
[OK]                ECDH BrainpoolP256r1 test vectors                  297   312 - Public key uses wrong curve: brainpoolP512t1.
 ...                ECDH BrainpoolP256r1 test vectors                  298   313 - Public key uses wrong curve: FRP256v1.
[OK]                ECDH BrainpoolP256r1 test vectors                  298   313 - Public key uses wrong curve: FRP256v1.
 ...                ECDH BrainpoolP256r1 test vectors                  299   314 - invalid public key.
[OK]                ECDH BrainpoolP256r1 test vectors                  299   314 - invalid public key.
 ...                ECDH BrainpoolP256r1 test vectors                  300   315 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP256r1 test vectors                  300   315 - public key is a low order point on twist.
 ...                ECDH BrainpoolP256r1 test vectors                  301   316 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP256r1 test vectors                  301   316 - public key is a low order point on twist.
 ...                ECDH BrainpoolP256r1 test vectors                  302   317 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP256r1 test vectors                  302   317 - public key is a low order point on twist.
 ...                ECDH BrainpoolP256r1 test vectors                  303   318 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP256r1 test vectors                  303   318 - public key is a low order point on twist.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)          0   1 - signature malleability.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)          0   1 - signature malleability.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)          1   2 - valid.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)          1   2 - valid.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)          2   3 - long form encoding of length of sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)          2   3 - long form encoding of length of sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)          3   4 - length of sequence contains leading 0.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)          3   4 - length of sequence contains leading 0.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)          4   5 - wrong length of sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)          4   5 - wrong length of sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)          5   6 - wrong length of sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)          5   6 - wrong length of sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)          6   7 - uint32 overflow in length of sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)          6   7 - uint32 overflow in length of sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)          7   8 - uint64 overflow in length of sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)          7   8 - uint64 overflow in length of sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)          8   9 - length of sequence = 2**31 - 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)          8   9 - length of sequence = 2**31 - 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)          9   10 - length of sequence = 2**32 - 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)          9   10 - length of sequence = 2**32 - 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         10   11 - length of sequence = 2**40 - 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         10   11 - length of sequence = 2**40 - 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         11   12 - length of sequence = 2**64 - 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         11   12 - length of sequence = 2**64 - 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         12   13 - incorrect length of sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         12   13 - incorrect length of sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         13   14 - indefinite length without termination.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         13   14 - indefinite length without termination.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         14   15 - indefinite length without termination.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         14   15 - indefinite length without termination.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         15   16 - indefinite length without termination.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         15   16 - indefinite length without termination.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         16   17 - removing sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         16   17 - removing sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         17   18 - lonely sequence tag.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         17   18 - lonely sequence tag.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         18   19 - appending 0's to sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         18   19 - appending 0's to sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         19   20 - prepending 0's to sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         19   20 - prepending 0's to sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         20   21 - appending unused 0's to sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         20   21 - appending unused 0's to sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         21   22 - appending null value to sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         21   22 - appending null value to sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         22   23 - including garbage.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         22   23 - including garbage.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         23   24 - including garbage.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         23   24 - including garbage.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         24   25 - including garbage.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         24   25 - including garbage.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         25   26 - including garbage.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         25   26 - including garbage.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         26   27 - including garbage.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         26   27 - including garbage.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         27   28 - including garbage.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         27   28 - including garbage.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         28   29 - including garbage.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         28   29 - including garbage.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         29   30 - including garbage.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         29   30 - including garbage.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         30   31 - including garbage.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         30   31 - including garbage.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         31   32 - including undefined tags.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         31   32 - including undefined tags.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         32   33 - including undefined tags.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         32   33 - including undefined tags.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         33   34 - including undefined tags.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         33   34 - including undefined tags.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         34   35 - including undefined tags.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         34   35 - including undefined tags.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         35   36 - including undefined tags.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         35   36 - including undefined tags.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         36   37 - including undefined tags.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         36   37 - including undefined tags.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         37   38 - truncated length of sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         37   38 - truncated length of sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         38   39 - using composition with indefinite length.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         38   39 - using composition with indefinite length.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         39   40 - using composition with indefinite length.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         39   40 - using composition with indefinite length.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         40   41 - using composition with indefinite length.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         40   41 - using composition with indefinite length.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         41   42 - using composition with wrong tag.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         41   42 - using composition with wrong tag.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         42   43 - using composition with wrong tag.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         42   43 - using composition with wrong tag.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         43   44 - using composition with wrong tag.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         43   44 - using composition with wrong tag.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         44   45 - Replacing sequence with NULL.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         44   45 - Replacing sequence with NULL.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         45   46 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         45   46 - changing tag value of sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         46   47 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         46   47 - changing tag value of sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         47   48 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         47   48 - changing tag value of sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         48   49 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         48   49 - changing tag value of sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         49   50 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         49   50 - changing tag value of sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         50   51 - dropping value of sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         50   51 - dropping value of sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         51   52 - using composition for sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         51   52 - using composition for sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         52   53 - truncated sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         52   53 - truncated sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         53   54 - truncated sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         53   54 - truncated sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         54   55 - indefinite length.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         54   55 - indefinite length.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         55   56 - indefinite length with truncated delimiter.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         55   56 - indefinite length with truncated delimiter.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         56   57 - indefinite length with additional element.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         56   57 - indefinite length with additional element.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         57   58 - indefinite length with truncated element.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         57   58 - indefinite length with truncated element.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         58   59 - indefinite length with garbage.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         58   59 - indefinite length with garbage.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         59   60 - indefinite length with nonempty EOC.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         59   60 - indefinite length with nonempty EOC.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         60   61 - prepend empty sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         60   61 - prepend empty sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         61   62 - append empty sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         61   62 - append empty sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         62   63 - append garbage with high tag number.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         62   63 - append garbage with high tag number.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         63   64 - sequence of sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         63   64 - sequence of sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         64   65 - truncated sequence: removed last 1 elements.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         64   65 - truncated sequence: removed last 1 elements.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         65   66 - repeating element in sequence.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         65   66 - repeating element in sequence.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         66   67 - long form encoding of length of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         66   67 - long form encoding of length of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         67   68 - long form encoding of length of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         67   68 - long form encoding of length of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         68   69 - length of integer contains leading 0.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         68   69 - length of integer contains leading 0.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         69   70 - length of integer contains leading 0.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         69   70 - length of integer contains leading 0.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         70   71 - wrong length of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         70   71 - wrong length of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         71   72 - wrong length of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         71   72 - wrong length of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         72   73 - wrong length of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         72   73 - wrong length of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         73   74 - wrong length of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         73   74 - wrong length of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         74   75 - uint32 overflow in length of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         74   75 - uint32 overflow in length of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         75   76 - uint32 overflow in length of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         75   76 - uint32 overflow in length of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         76   77 - uint64 overflow in length of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         76   77 - uint64 overflow in length of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         77   78 - uint64 overflow in length of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         77   78 - uint64 overflow in length of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         78   79 - length of integer = 2**31 - 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         78   79 - length of integer = 2**31 - 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         79   80 - length of integer = 2**31 - 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         79   80 - length of integer = 2**31 - 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         80   81 - length of integer = 2**32 - 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         80   81 - length of integer = 2**32 - 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         81   82 - length of integer = 2**32 - 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         81   82 - length of integer = 2**32 - 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         82   83 - length of integer = 2**40 - 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         82   83 - length of integer = 2**40 - 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         83   84 - length of integer = 2**40 - 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         83   84 - length of integer = 2**40 - 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         84   85 - length of integer = 2**64 - 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         84   85 - length of integer = 2**64 - 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         85   86 - length of integer = 2**64 - 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         85   86 - length of integer = 2**64 - 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         86   87 - incorrect length of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         86   87 - incorrect length of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         87   88 - incorrect length of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         87   88 - incorrect length of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         88   89 - removing integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         88   89 - removing integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         89   90 - lonely integer tag.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         89   90 - lonely integer tag.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         90   91 - lonely integer tag.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         90   91 - lonely integer tag.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         91   92 - appending 0's to integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         91   92 - appending 0's to integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         92   93 - appending 0's to integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         92   93 - appending 0's to integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         93   94 - prepending 0's to integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         93   94 - prepending 0's to integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         94   95 - prepending 0's to integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         94   95 - prepending 0's to integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         95   96 - appending unused 0's to integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         95   96 - appending unused 0's to integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         96   97 - appending null value to integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         96   97 - appending null value to integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         97   98 - appending null value to integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         97   98 - appending null value to integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         98   99 - truncated length of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         98   99 - truncated length of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)         99   100 - truncated length of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)         99   100 - truncated length of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        100   101 - Replacing integer with NULL.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        100   101 - Replacing integer with NULL.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        101   102 - Replacing integer with NULL.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        101   102 - Replacing integer with NULL.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        102   103 - changing tag value of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        102   103 - changing tag value of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        103   104 - changing tag value of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        103   104 - changing tag value of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        104   105 - changing tag value of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        104   105 - changing tag value of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        105   106 - changing tag value of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        105   106 - changing tag value of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        106   107 - changing tag value of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        106   107 - changing tag value of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        107   108 - changing tag value of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        107   108 - changing tag value of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        108   109 - changing tag value of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        108   109 - changing tag value of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        109   110 - changing tag value of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        109   110 - changing tag value of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        110   111 - changing tag value of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        110   111 - changing tag value of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        111   112 - changing tag value of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        111   112 - changing tag value of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        112   113 - dropping value of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        112   113 - dropping value of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        113   114 - dropping value of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        113   114 - dropping value of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        114   115 - using composition for integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        114   115 - using composition for integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        115   116 - using composition for integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        115   116 - using composition for integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        116   117 - modify first byte of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        116   117 - modify first byte of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        117   118 - modify first byte of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        117   118 - modify first byte of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        118   119 - modify last byte of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        118   119 - modify last byte of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        119   120 - modify last byte of integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        119   120 - modify last byte of integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        120   121 - truncated integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        120   121 - truncated integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        121   122 - truncated integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        121   122 - truncated integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        122   123 - truncated integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        122   123 - truncated integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        123   124 - truncated integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        123   124 - truncated integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        124   125 - leading ff in integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        124   125 - leading ff in integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        125   126 - leading ff in integer.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        125   126 - leading ff in integer.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        126   127 - replaced integer by infinity.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        126   127 - replaced integer by infinity.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        127   128 - replaced integer by infinity.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        127   128 - replaced integer by infinity.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        128   129 - replacing integer with zero.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        128   129 - replacing integer with zero.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        129   130 - replacing integer with zero.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        129   130 - replacing integer with zero.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        142   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        142   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        143   144 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        143   144 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        144   145 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        144   145 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        145   146 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        145   146 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        146   147 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        146   147 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        147   148 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        147   148 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        148   149 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        148   149 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        149   150 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        149   150 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        150   151 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        150   151 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        151   152 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        151   152 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        152   153 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        152   153 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        153   154 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        153   154 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        154   155 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        154   155 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        155   156 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        155   156 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        156   157 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        156   157 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        157   158 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        157   158 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        158   159 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        158   159 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        159   160 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        159   160 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        160   161 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        160   161 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        161   162 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        161   162 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        162   163 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        162   163 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        163   164 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        163   164 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        164   165 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        164   165 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        165   166 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        165   166 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        166   167 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        166   167 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        167   168 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        167   168 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        168   169 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        168   169 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        169   170 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        169   170 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        170   171 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        170   171 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        171   172 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        171   172 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        172   173 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        172   173 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        173   174 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        173   174 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        174   175 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        174   175 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        175   176 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        175   176 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        176   177 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        176   177 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        177   178 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        177   178 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        178   179 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        178   179 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        179   180 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        179   180 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        180   181 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        180   181 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        181   182 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        181   182 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        182   183 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        182   183 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        183   184 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        183   184 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        184   185 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        184   185 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        185   186 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        185   186 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        186   187 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        186   187 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        187   188 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        187   188 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        188   189 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        188   189 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        189   190 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        189   190 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        190   191 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        190   191 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        191   192 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        191   192 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        192   193 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        192   193 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        193   194 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        193   194 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        194   195 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        194   195 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        195   196 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        195   196 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        196   197 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        196   197 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        197   198 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        197   198 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        198   199 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        198   199 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        199   200 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        199   200 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        200   201 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        200   201 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        201   202 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        201   202 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        202   203 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        202   203 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        203   204 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        203   204 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        204   205 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        204   205 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        205   206 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        205   206 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        206   207 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        206   207 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        207   208 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        207   208 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        208   209 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        208   209 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        209   210 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        209   210 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        210   211 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        210   211 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        211   212 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        211   212 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        212   213 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        212   213 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        213   214 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        213   214 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        214   215 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        214   215 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        215   216 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        215   216 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        216   217 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        216   217 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        217   218 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        217   218 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        218   219 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        218   219 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        219   220 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        219   220 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        220   221 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        220   221 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        221   222 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        221   222 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        222   223 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        222   223 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        223   224 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        223   224 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        224   225 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        224   225 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        225   226 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        225   226 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        226   227 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        226   227 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        227   228 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        227   228 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        228   229 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        228   229 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        229   230 - Edge case for Shamir multiplication.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        229   230 - Edge case for Shamir multiplication.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        230   231 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        230   231 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        231   232 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        231   232 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        232   233 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        232   233 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        233   234 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        233   234 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        234   235 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        234   235 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        235   236 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        235   236 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        236   237 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        236   237 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        237   238 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        237   238 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        238   239 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        238   239 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        239   240 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        239   240 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        240   241 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        240   241 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        241   242 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        241   242 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        242   243 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        242   243 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        243   244 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        243   244 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        244   245 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        244   245 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        245   246 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        245   246 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        246   247 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        246   247 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        247   248 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        247   248 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        248   249 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        248   249 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        249   250 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        249   250 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        250   251 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        250   251 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        251   252 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        251   252 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        252   253 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        252   253 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        253   254 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        253   254 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        254   255 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        254   255 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        255   256 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        255   256 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        256   257 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        256   257 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        257   258 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        257   258 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        258   259 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        258   259 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        259   260 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        259   260 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        260   261 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        260   261 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        261   262 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        261   262 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        262   263 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        262   263 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        263   264 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        263   264 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        264   265 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        264   265 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        265   266 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        265   266 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        266   267 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        266   267 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        267   268 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        267   268 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        268   269 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        268   269 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        269   270 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        269   270 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        270   271 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        270   271 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        271   272 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        271   272 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        272   273 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        272   273 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        273   274 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        273   274 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        274   275 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        274   275 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        275   276 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        275   276 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        276   277 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        276   277 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        277   278 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        277   278 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        278   279 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        278   279 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        279   280 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        279   280 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        280   281 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        280   281 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        281   282 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        281   282 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        282   283 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        282   283 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        283   284 - special case hash.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        283   284 - special case hash.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        284   285 - k*G has a large x-coordinate.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        284   285 - k*G has a large x-coordinate.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        285   286 - r too large.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        285   286 - r too large.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        286   287 - r,s are large.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        286   287 - r,s are large.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        287   288 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        287   288 - r and s^-1 have a large Hamming weight.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        288   289 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        288   289 - r and s^-1 have a large Hamming weight.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        289   290 - small r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        289   290 - small r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        290   291 - small r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        290   291 - small r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        291   292 - small r and s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        291   292 - small r and s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        292   293 - r is larger than n.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        292   293 - r is larger than n.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        293   294 - s is larger than n.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        293   294 - s is larger than n.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        294   295 - small r and s^-1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        294   295 - small r and s^-1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        295   296 - smallish r and s^-1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        295   296 - smallish r and s^-1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        296   297 - 100-bit r and small s^-1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        296   297 - 100-bit r and small s^-1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        297   298 - small r and 100 bit s^-1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        297   298 - small r and 100 bit s^-1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        298   299 - 100-bit r and s^-1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        298   299 - 100-bit r and s^-1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        299   300 - r and s^-1 are close to n.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        299   300 - r and s^-1 are close to n.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        300   301 - s == 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        300   301 - s == 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        301   302 - s == 0.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        301   302 - s == 0.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        302   303 - point at infinity during verify.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        302   303 - point at infinity during verify.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        303   304 - edge case for signature malleability.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        303   304 - edge case for signature malleability.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        304   305 - edge case for signature malleability.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        304   305 - edge case for signature malleability.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        305   306 - u1 == 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        305   306 - u1 == 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        306   307 - u1 == n - 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        306   307 - u1 == n - 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        307   308 - u2 == 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        307   308 - u2 == 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        308   309 - u2 == n - 1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        308   309 - u2 == n - 1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        309   310 - edge case for u1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        309   310 - edge case for u1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        310   311 - edge case for u1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        310   311 - edge case for u1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        311   312 - edge case for u1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        311   312 - edge case for u1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        312   313 - edge case for u1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        312   313 - edge case for u1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        313   314 - edge case for u1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        313   314 - edge case for u1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        314   315 - edge case for u1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        314   315 - edge case for u1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        315   316 - edge case for u1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        315   316 - edge case for u1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        316   317 - edge case for u1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        316   317 - edge case for u1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        317   318 - edge case for u1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        317   318 - edge case for u1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        318   319 - edge case for u1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        318   319 - edge case for u1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        319   320 - edge case for u1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        319   320 - edge case for u1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        320   321 - edge case for u1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        320   321 - edge case for u1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        321   322 - edge case for u2.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        321   322 - edge case for u2.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        322   323 - edge case for u2.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        322   323 - edge case for u2.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        323   324 - edge case for u2.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        323   324 - edge case for u2.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        324   325 - edge case for u2.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        324   325 - edge case for u2.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        325   326 - edge case for u2.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        325   326 - edge case for u2.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        326   327 - edge case for u2.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        326   327 - edge case for u2.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        327   328 - edge case for u2.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        327   328 - edge case for u2.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        328   329 - edge case for u2.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        328   329 - edge case for u2.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        329   330 - edge case for u2.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        329   330 - edge case for u2.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        330   331 - edge case for u2.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        330   331 - edge case for u2.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        331   332 - edge case for u2.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        331   332 - edge case for u2.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        332   333 - edge case for u2.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        332   333 - edge case for u2.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        333   334 - point duplication during verification.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        333   334 - point duplication during verification.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        334   335 - duplication bug.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        334   335 - duplication bug.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        335   336 - comparison with point at infinity .
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        335   336 - comparison with point at infinity .
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        336   337 - extreme value for k and edgecase s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        336   337 - extreme value for k and edgecase s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        337   338 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        337   338 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        338   339 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        338   339 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        339   340 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        339   340 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        340   341 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        340   341 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        341   342 - extreme value for k.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        341   342 - extreme value for k.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        342   343 - extreme value for k and edgecase s.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        342   343 - extreme value for k and edgecase s.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        343   344 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        343   344 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        344   345 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        344   345 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        345   346 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        345   346 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        346   347 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        346   347 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        347   348 - extreme value for k.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        347   348 - extreme value for k.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        348   349 - testing point duplication.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        348   349 - testing point duplication.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        349   350 - testing point duplication.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        349   350 - testing point duplication.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        350   351 - testing point duplication.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        350   351 - testing point duplication.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        351   352 - testing point duplication.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        351   352 - testing point duplication.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        352   353 - pseudorandom signature.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        352   353 - pseudorandom signature.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        353   354 - pseudorandom signature.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        353   354 - pseudorandom signature.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        354   355 - pseudorandom signature.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        354   355 - pseudorandom signature.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        355   356 - pseudorandom signature.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        355   356 - pseudorandom signature.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        356   357 - x-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        356   357 - x-coordinate of the public key is large.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        357   358 - x-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        357   358 - x-coordinate of the public key is large.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        358   359 - x-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        358   359 - x-coordinate of the public key is large.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        359   360 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        359   360 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        360   361 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        360   361 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        361   362 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        361   362 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        362   363 - x-coordinate of the public key is small.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        362   363 - x-coordinate of the public key is small.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        363   364 - x-coordinate of the public key is small.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        363   364 - x-coordinate of the public key is small.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        364   365 - x-coordinate of the public key is small.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        364   365 - x-coordinate of the public key is small.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        365   366 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        365   366 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        366   367 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        366   367 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        367   368 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        367   368 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        368   369 - y-coordinate of the public key is small.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        368   369 - y-coordinate of the public key is small.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        369   370 - y-coordinate of the public key is small.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        369   370 - y-coordinate of the public key is small.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        370   371 - y-coordinate of the public key is small.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        370   371 - y-coordinate of the public key is small.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        371   372 - y-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        371   372 - y-coordinate of the public key is large.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        372   373 - y-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        372   373 - y-coordinate of the public key is large.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        373   374 - y-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        373   374 - y-coordinate of the public key is large.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        374   375 - x-coordinate of the public key has many trailing 1's on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        374   375 - x-coordinate of the public key has many trailing 1's on brainpoolP256t1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        375   376 - x-coordinate of the public key has many trailing 1's on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        375   376 - x-coordinate of the public key has many trailing 1's on brainpoolP256t1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        376   377 - x-coordinate of the public key has many trailing 1's on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        376   377 - x-coordinate of the public key has many trailing 1's on brainpoolP256t1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        377   378 - y-coordinate of the public key is small on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        377   378 - y-coordinate of the public key is small on brainpoolP256t1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        378   379 - y-coordinate of the public key is small on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        378   379 - y-coordinate of the public key is small on brainpoolP256t1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        379   380 - y-coordinate of the public key is small on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        379   380 - y-coordinate of the public key is small on brainpoolP256t1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        380   381 - y-coordinate of the public key is large on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        380   381 - y-coordinate of the public key is large on brainpoolP256t1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        381   382 - y-coordinate of the public key is large on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        381   382 - y-coordinate of the public key is large on brainpoolP256t1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        382   383 - y-coordinate of the public key is large on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        382   383 - y-coordinate of the public key is large on brainpoolP256t1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        383   384 - y-coordinate of the public key has many trailing 1's on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        383   384 - y-coordinate of the public key has many trailing 1's on brainpoolP256t1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        384   385 - y-coordinate of the public key has many trailing 1's on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        384   385 - y-coordinate of the public key has many trailing 1's on brainpoolP256t1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        385   386 - y-coordinate of the public key has many trailing 1's on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        385   386 - y-coordinate of the public key has many trailing 1's on brainpoolP256t1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        386   387 - x-coordinate of the public key is large on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        386   387 - x-coordinate of the public key is large on brainpoolP256t1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        387   388 - x-coordinate of the public key is large on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        387   388 - x-coordinate of the public key is large on brainpoolP256t1.
 ...                ECDSA BrainpoolP256r1 test vectors (SHA256)        388   389 - x-coordinate of the public key is large on brainpoolP256t1.
[OK]                ECDSA BrainpoolP256r1 test vectors (SHA256)        388   389 - x-coordinate of the public key is large on brainpoolP256t1.
 ...                ECDH BrainpoolP384r1 test vectors                    0   1 - normal case.
[OK]                ECDH BrainpoolP384r1 test vectors                    0   1 - normal case.
 ...                ECDH BrainpoolP384r1 test vectors                    1   2 - compressed public key.
[OK]                ECDH BrainpoolP384r1 test vectors                    1   2 - compressed public key.
 ...                ECDH BrainpoolP384r1 test vectors                    2   3 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                    2   3 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                    3   4 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                    3   4 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                    4   5 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                    4   5 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                    5   6 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                    5   6 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                    6   7 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                    6   7 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                    7   8 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                    7   8 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                    8   9 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                    8   9 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                    9   10 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                    9   10 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                   10   11 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                   10   11 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                   11   12 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                   11   12 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                   12   13 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                   12   13 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                   13   14 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                   13   14 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                   14   15 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                   14   15 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                   15   16 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                   15   16 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                   16   17 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                   16   17 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                   17   18 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                   17   18 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                   18   19 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                   18   19 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                   19   20 - edge case for shared secret.
[OK]                ECDH BrainpoolP384r1 test vectors                   19   20 - edge case for shared secret.
 ...                ECDH BrainpoolP384r1 test vectors                   20   21 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   20   21 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   21   22 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   21   22 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   22   23 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   22   23 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   23   24 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   23   24 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   24   25 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   24   25 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   25   26 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   25   26 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   26   27 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   26   27 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   27   28 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   27   28 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   28   29 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   28   29 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   29   30 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   29   30 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   30   31 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   30   31 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   31   32 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   31   32 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   32   33 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   32   33 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   33   34 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   33   34 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   34   35 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   34   35 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   35   36 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   35   36 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   36   37 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   36   37 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   37   38 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP384r1 test vectors                   37   38 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP384r1 test vectors                   38   39 - point with coordinate x = 1.
[OK]                ECDH BrainpoolP384r1 test vectors                   38   39 - point with coordinate x = 1.
 ...                ECDH BrainpoolP384r1 test vectors                   39   40 - point with coordinate x = 1.
[OK]                ECDH BrainpoolP384r1 test vectors                   39   40 - point with coordinate x = 1.
 ...                ECDH BrainpoolP384r1 test vectors                   40   41 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   40   41 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   41   42 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   41   42 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   42   43 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   42   43 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   43   44 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   43   44 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   44   45 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   44   45 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   45   46 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   45   46 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   46   47 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   46   47 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   47   48 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   47   48 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   48   49 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   48   49 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   49   50 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   49   50 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   50   51 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   50   51 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   51   52 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   51   52 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   52   53 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   52   53 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   53   54 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   53   54 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   54   55 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   54   55 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   55   56 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   55   56 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   56   57 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   56   57 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   57   58 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   57   58 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   58   59 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   58   59 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   59   60 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   59   60 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   60   61 - point with coordinate x = 1 in left to right addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   60   61 - point with coordinate x = 1 in left to right addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   61   62 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   61   62 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   62   63 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   62   63 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   63   64 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   63   64 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   64   65 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   64   65 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   65   66 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   65   66 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   66   67 - point with coordinate x = 1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   66   67 - point with coordinate x = 1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   67   68 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   67   68 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   68   69 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   68   69 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   69   70 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   69   70 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   70   71 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   70   71 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   71   72 - point with coordinate x = 1 in right to left addition chain.
[OK]                ECDH BrainpoolP384r1 test vectors                   71   72 - point with coordinate x = 1 in right to left addition chain.
 ...                ECDH BrainpoolP384r1 test vectors                   72   73 - edge case private key.
[OK]                ECDH BrainpoolP384r1 test vectors                   72   73 - edge case private key.
 ...                ECDH BrainpoolP384r1 test vectors                   73   74 - edge case private key.
[OK]                ECDH BrainpoolP384r1 test vectors                   73   74 - edge case private key.
 ...                ECDH BrainpoolP384r1 test vectors                   74   75 - edge case private key.
[OK]                ECDH BrainpoolP384r1 test vectors                   74   75 - edge case private key.
 ...                ECDH BrainpoolP384r1 test vectors                   75   76 - edge case private key.
[OK]                ECDH BrainpoolP384r1 test vectors                   75   76 - edge case private key.
 ...                ECDH BrainpoolP384r1 test vectors                   76   77 - edge case private key.
[OK]                ECDH BrainpoolP384r1 test vectors                   76   77 - edge case private key.
 ...                ECDH BrainpoolP384r1 test vectors                   77   78 - edge case private key.
[OK]                ECDH BrainpoolP384r1 test vectors                   77   78 - edge case private key.
 ...                ECDH BrainpoolP384r1 test vectors                   78   79 - edge case private key.
[OK]                ECDH BrainpoolP384r1 test vectors                   78   79 - edge case private key.
 ...                ECDH BrainpoolP384r1 test vectors                   79   80 - edge case private key.
[OK]                ECDH BrainpoolP384r1 test vectors                   79   80 - edge case private key.
 ...                ECDH BrainpoolP384r1 test vectors                   80   81 - edge case private key.
[OK]                ECDH BrainpoolP384r1 test vectors                   80   81 - edge case private key.
 ...                ECDH BrainpoolP384r1 test vectors                   81   82 - edge case private key.
[OK]                ECDH BrainpoolP384r1 test vectors                   81   82 - edge case private key.
 ...                ECDH BrainpoolP384r1 test vectors                   82   83 - edge case private key.
[OK]                ECDH BrainpoolP384r1 test vectors                   82   83 - edge case private key.
 ...                ECDH BrainpoolP384r1 test vectors                   83   84 - edge case private key.
[OK]                ECDH BrainpoolP384r1 test vectors                   83   84 - edge case private key.
 ...                ECDH BrainpoolP384r1 test vectors                   84   85 - edge case private key.
[OK]                ECDH BrainpoolP384r1 test vectors                   84   85 - edge case private key.
 ...                ECDH BrainpoolP384r1 test vectors                   85   86 - edge case private key.
[OK]                ECDH BrainpoolP384r1 test vectors                   85   86 - edge case private key.
 ...                ECDH BrainpoolP384r1 test vectors                   86   87 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                   86   87 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                   87   88 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                   87   88 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                   88   89 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                   88   89 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                   89   90 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                   89   90 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                   90   91 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                   90   91 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                   91   92 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                   91   92 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                   92   93 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                   92   93 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                   93   94 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                   93   94 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                   94   95 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                   94   95 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                   95   96 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                   95   96 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                   96   97 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                   96   97 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                   97   98 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                   97   98 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                   98   99 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                   98   99 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                   99   100 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                   99   100 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                  100   101 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                  100   101 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                  101   102 - point is not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                  101   102 - point is not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                  102   103 - public key uses brainpoolP384t1 with a point shared with brainpoolP384r1.
[OK]                ECDH BrainpoolP384r1 test vectors                  102   103 - public key uses brainpoolP384t1 with a point shared with brainpoolP384r1.
 ...                ECDH BrainpoolP384r1 test vectors                  103   104 - public key uses brainpoolP384t1 with a point shared with brainpoolP384r1.
[OK]                ECDH BrainpoolP384r1 test vectors                  103   104 - public key uses brainpoolP384t1 with a point shared with brainpoolP384r1.
 ...                ECDH BrainpoolP384r1 test vectors                  104   105 - .
[OK]                ECDH BrainpoolP384r1 test vectors                  104   105 - .
 ...                ECDH BrainpoolP384r1 test vectors                  105   106 - public point not on curve.
[OK]                ECDH BrainpoolP384r1 test vectors                  105   106 - public point not on curve.
 ...                ECDH BrainpoolP384r1 test vectors                  106   107 - public point = (0,0).
[OK]                ECDH BrainpoolP384r1 test vectors                  106   107 - public point = (0,0).
 ...                ECDH BrainpoolP384r1 test vectors                  107   120 - using secp224r1.
[OK]                ECDH BrainpoolP384r1 test vectors                  107   120 - using secp224r1.
 ...                ECDH BrainpoolP384r1 test vectors                  108   121 - using secp256r1.
[OK]                ECDH BrainpoolP384r1 test vectors                  108   121 - using secp256r1.
 ...                ECDH BrainpoolP384r1 test vectors                  109   122 - using secp256k1.
[OK]                ECDH BrainpoolP384r1 test vectors                  109   122 - using secp256k1.
 ...                ECDH BrainpoolP384r1 test vectors                  110   125 - public key on isomorphic curve brainpoolP384t1.
[OK]                ECDH BrainpoolP384r1 test vectors                  110   125 - public key on isomorphic curve brainpoolP384t1.
 ...                ECDH BrainpoolP384r1 test vectors                  111   126 - Public key uses wrong curve: secp224r1.
[OK]                ECDH BrainpoolP384r1 test vectors                  111   126 - Public key uses wrong curve: secp224r1.
 ...                ECDH BrainpoolP384r1 test vectors                  112   127 - Public key uses wrong curve: secp256r1.
[OK]                ECDH BrainpoolP384r1 test vectors                  112   127 - Public key uses wrong curve: secp256r1.
 ...                ECDH BrainpoolP384r1 test vectors                  113   128 - Public key uses wrong curve: secp384r1.
[OK]                ECDH BrainpoolP384r1 test vectors                  113   128 - Public key uses wrong curve: secp384r1.
 ...                ECDH BrainpoolP384r1 test vectors                  114   129 - Public key uses wrong curve: secp521r1.
[OK]                ECDH BrainpoolP384r1 test vectors                  114   129 - Public key uses wrong curve: secp521r1.
 ...                ECDH BrainpoolP384r1 test vectors                  115   130 - Public key uses wrong curve: secp256k1.
[OK]                ECDH BrainpoolP384r1 test vectors                  115   130 - Public key uses wrong curve: secp256k1.
 ...                ECDH BrainpoolP384r1 test vectors                  116   131 - Public key uses wrong curve: secp224k1.
[OK]                ECDH BrainpoolP384r1 test vectors                  116   131 - Public key uses wrong curve: secp224k1.
 ...                ECDH BrainpoolP384r1 test vectors                  117   132 - Public key uses wrong curve: brainpoolP224r1.
[OK]                ECDH BrainpoolP384r1 test vectors                  117   132 - Public key uses wrong curve: brainpoolP224r1.
 ...                ECDH BrainpoolP384r1 test vectors                  118   133 - Public key uses wrong curve: brainpoolP256r1.
[OK]                ECDH BrainpoolP384r1 test vectors                  118   133 - Public key uses wrong curve: brainpoolP256r1.
 ...                ECDH BrainpoolP384r1 test vectors                  119   134 - Public key uses wrong curve: brainpoolP320r1.
[OK]                ECDH BrainpoolP384r1 test vectors                  119   134 - Public key uses wrong curve: brainpoolP320r1.
 ...                ECDH BrainpoolP384r1 test vectors                  120   135 - Public key uses wrong curve: brainpoolP512r1.
[OK]                ECDH BrainpoolP384r1 test vectors                  120   135 - Public key uses wrong curve: brainpoolP512r1.
 ...                ECDH BrainpoolP384r1 test vectors                  121   136 - Public key uses wrong curve: brainpoolP224t1.
[OK]                ECDH BrainpoolP384r1 test vectors                  121   136 - Public key uses wrong curve: brainpoolP224t1.
 ...                ECDH BrainpoolP384r1 test vectors                  122   137 - Public key uses wrong curve: brainpoolP256t1.
[OK]                ECDH BrainpoolP384r1 test vectors                  122   137 - Public key uses wrong curve: brainpoolP256t1.
 ...                ECDH BrainpoolP384r1 test vectors                  123   138 - Public key uses wrong curve: brainpoolP320t1.
[OK]                ECDH BrainpoolP384r1 test vectors                  123   138 - Public key uses wrong curve: brainpoolP320t1.
 ...                ECDH BrainpoolP384r1 test vectors                  124   139 - Public key uses wrong curve: brainpoolP384t1.
[OK]                ECDH BrainpoolP384r1 test vectors                  124   139 - Public key uses wrong curve: brainpoolP384t1.
 ...                ECDH BrainpoolP384r1 test vectors                  125   140 - Public key uses wrong curve: brainpoolP512t1.
[OK]                ECDH BrainpoolP384r1 test vectors                  125   140 - Public key uses wrong curve: brainpoolP512t1.
 ...                ECDH BrainpoolP384r1 test vectors                  126   141 - Public key uses wrong curve: FRP256v1.
[OK]                ECDH BrainpoolP384r1 test vectors                  126   141 - Public key uses wrong curve: FRP256v1.
 ...                ECDH BrainpoolP384r1 test vectors                  127   142 - invalid public key.
[OK]                ECDH BrainpoolP384r1 test vectors                  127   142 - invalid public key.
 ...                ECDH BrainpoolP384r1 test vectors                  128   143 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  128   143 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  129   144 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  129   144 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  130   145 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  130   145 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  131   146 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  131   146 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  132   147 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  132   147 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  133   148 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  133   148 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  134   149 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  134   149 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  135   150 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  135   150 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  136   151 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  136   151 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  137   152 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  137   152 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  138   153 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  138   153 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  139   154 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  139   154 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  140   155 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  140   155 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  141   156 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  141   156 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  142   157 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  142   157 - public key is a low order point on twist.
 ...                ECDH BrainpoolP384r1 test vectors                  143   158 - public key is a low order point on twist.
[OK]                ECDH BrainpoolP384r1 test vectors                  143   158 - public key is a low order point on twist.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)          0   1 - signature malleability.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)          0   1 - signature malleability.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)          1   2 - valid.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)          1   2 - valid.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)          2   3 - long form encoding of length of sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)          2   3 - long form encoding of length of sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)          3   4 - length of sequence contains leading 0.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)          3   4 - length of sequence contains leading 0.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)          4   5 - wrong length of sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)          4   5 - wrong length of sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)          5   6 - wrong length of sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)          5   6 - wrong length of sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)          6   7 - uint32 overflow in length of sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)          6   7 - uint32 overflow in length of sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)          7   8 - uint64 overflow in length of sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)          7   8 - uint64 overflow in length of sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)          8   9 - length of sequence = 2**31 - 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)          8   9 - length of sequence = 2**31 - 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)          9   10 - length of sequence = 2**32 - 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)          9   10 - length of sequence = 2**32 - 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         10   11 - length of sequence = 2**40 - 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         10   11 - length of sequence = 2**40 - 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         11   12 - length of sequence = 2**64 - 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         11   12 - length of sequence = 2**64 - 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         12   13 - incorrect length of sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         12   13 - incorrect length of sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         13   14 - indefinite length without termination.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         13   14 - indefinite length without termination.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         14   15 - indefinite length without termination.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         14   15 - indefinite length without termination.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         15   16 - indefinite length without termination.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         15   16 - indefinite length without termination.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         16   17 - removing sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         16   17 - removing sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         17   18 - lonely sequence tag.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         17   18 - lonely sequence tag.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         18   19 - appending 0's to sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         18   19 - appending 0's to sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         19   20 - prepending 0's to sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         19   20 - prepending 0's to sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         20   21 - appending unused 0's to sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         20   21 - appending unused 0's to sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         21   22 - appending null value to sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         21   22 - appending null value to sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         22   23 - including garbage.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         22   23 - including garbage.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         23   24 - including garbage.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         23   24 - including garbage.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         24   25 - including garbage.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         24   25 - including garbage.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         25   26 - including garbage.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         25   26 - including garbage.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         26   27 - including garbage.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         26   27 - including garbage.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         27   28 - including garbage.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         27   28 - including garbage.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         28   29 - including garbage.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         28   29 - including garbage.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         29   30 - including garbage.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         29   30 - including garbage.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         30   31 - including garbage.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         30   31 - including garbage.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         31   32 - including undefined tags.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         31   32 - including undefined tags.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         32   33 - including undefined tags.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         32   33 - including undefined tags.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         33   34 - including undefined tags.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         33   34 - including undefined tags.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         34   35 - including undefined tags.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         34   35 - including undefined tags.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         35   36 - including undefined tags.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         35   36 - including undefined tags.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         36   37 - including undefined tags.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         36   37 - including undefined tags.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         37   38 - truncated length of sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         37   38 - truncated length of sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         38   39 - using composition with indefinite length.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         38   39 - using composition with indefinite length.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         39   40 - using composition with indefinite length.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         39   40 - using composition with indefinite length.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         40   41 - using composition with indefinite length.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         40   41 - using composition with indefinite length.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         41   42 - using composition with wrong tag.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         41   42 - using composition with wrong tag.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         42   43 - using composition with wrong tag.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         42   43 - using composition with wrong tag.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         43   44 - using composition with wrong tag.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         43   44 - using composition with wrong tag.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         44   45 - Replacing sequence with NULL.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         44   45 - Replacing sequence with NULL.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         45   46 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         45   46 - changing tag value of sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         46   47 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         46   47 - changing tag value of sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         47   48 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         47   48 - changing tag value of sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         48   49 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         48   49 - changing tag value of sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         49   50 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         49   50 - changing tag value of sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         50   51 - dropping value of sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         50   51 - dropping value of sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         51   52 - using composition for sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         51   52 - using composition for sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         52   53 - truncated sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         52   53 - truncated sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         53   54 - truncated sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         53   54 - truncated sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         54   55 - indefinite length.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         54   55 - indefinite length.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         55   56 - indefinite length with truncated delimiter.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         55   56 - indefinite length with truncated delimiter.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         56   57 - indefinite length with additional element.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         56   57 - indefinite length with additional element.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         57   58 - indefinite length with truncated element.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         57   58 - indefinite length with truncated element.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         58   59 - indefinite length with garbage.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         58   59 - indefinite length with garbage.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         59   60 - indefinite length with nonempty EOC.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         59   60 - indefinite length with nonempty EOC.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         60   61 - prepend empty sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         60   61 - prepend empty sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         61   62 - append empty sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         61   62 - append empty sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         62   63 - append garbage with high tag number.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         62   63 - append garbage with high tag number.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         63   64 - sequence of sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         63   64 - sequence of sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         64   65 - truncated sequence: removed last 1 elements.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         64   65 - truncated sequence: removed last 1 elements.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         65   66 - repeating element in sequence.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         65   66 - repeating element in sequence.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         66   67 - long form encoding of length of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         66   67 - long form encoding of length of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         67   68 - long form encoding of length of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         67   68 - long form encoding of length of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         68   69 - length of integer contains leading 0.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         68   69 - length of integer contains leading 0.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         69   70 - length of integer contains leading 0.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         69   70 - length of integer contains leading 0.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         70   71 - wrong length of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         70   71 - wrong length of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         71   72 - wrong length of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         71   72 - wrong length of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         72   73 - wrong length of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         72   73 - wrong length of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         73   74 - wrong length of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         73   74 - wrong length of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         74   75 - uint32 overflow in length of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         74   75 - uint32 overflow in length of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         75   76 - uint32 overflow in length of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         75   76 - uint32 overflow in length of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         76   77 - uint64 overflow in length of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         76   77 - uint64 overflow in length of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         77   78 - uint64 overflow in length of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         77   78 - uint64 overflow in length of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         78   79 - length of integer = 2**31 - 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         78   79 - length of integer = 2**31 - 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         79   80 - length of integer = 2**31 - 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         79   80 - length of integer = 2**31 - 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         80   81 - length of integer = 2**32 - 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         80   81 - length of integer = 2**32 - 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         81   82 - length of integer = 2**32 - 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         81   82 - length of integer = 2**32 - 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         82   83 - length of integer = 2**40 - 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         82   83 - length of integer = 2**40 - 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         83   84 - length of integer = 2**40 - 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         83   84 - length of integer = 2**40 - 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         84   85 - length of integer = 2**64 - 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         84   85 - length of integer = 2**64 - 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         85   86 - length of integer = 2**64 - 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         85   86 - length of integer = 2**64 - 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         86   87 - incorrect length of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         86   87 - incorrect length of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         87   88 - incorrect length of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         87   88 - incorrect length of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         88   89 - removing integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         88   89 - removing integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         89   90 - lonely integer tag.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         89   90 - lonely integer tag.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         90   91 - lonely integer tag.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         90   91 - lonely integer tag.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         91   92 - appending 0's to integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         91   92 - appending 0's to integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         92   93 - appending 0's to integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         92   93 - appending 0's to integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         93   94 - prepending 0's to integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         93   94 - prepending 0's to integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         94   95 - prepending 0's to integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         94   95 - prepending 0's to integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         95   96 - appending unused 0's to integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         95   96 - appending unused 0's to integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         96   97 - appending null value to integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         96   97 - appending null value to integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         97   98 - appending null value to integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         97   98 - appending null value to integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         98   99 - truncated length of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         98   99 - truncated length of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)         99   100 - truncated length of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)         99   100 - truncated length of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        100   101 - Replacing integer with NULL.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        100   101 - Replacing integer with NULL.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        101   102 - Replacing integer with NULL.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        101   102 - Replacing integer with NULL.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        102   103 - changing tag value of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        102   103 - changing tag value of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        103   104 - changing tag value of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        103   104 - changing tag value of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        104   105 - changing tag value of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        104   105 - changing tag value of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        105   106 - changing tag value of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        105   106 - changing tag value of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        106   107 - changing tag value of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        106   107 - changing tag value of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        107   108 - changing tag value of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        107   108 - changing tag value of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        108   109 - changing tag value of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        108   109 - changing tag value of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        109   110 - changing tag value of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        109   110 - changing tag value of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        110   111 - changing tag value of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        110   111 - changing tag value of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        111   112 - changing tag value of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        111   112 - changing tag value of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        112   113 - dropping value of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        112   113 - dropping value of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        113   114 - dropping value of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        113   114 - dropping value of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        114   115 - using composition for integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        114   115 - using composition for integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        115   116 - using composition for integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        115   116 - using composition for integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        116   117 - modify first byte of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        116   117 - modify first byte of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        117   118 - modify first byte of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        117   118 - modify first byte of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        118   119 - modify last byte of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        118   119 - modify last byte of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        119   120 - modify last byte of integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        119   120 - modify last byte of integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        120   121 - truncated integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        120   121 - truncated integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        121   122 - truncated integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        121   122 - truncated integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        122   123 - truncated integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        122   123 - truncated integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        123   124 - truncated integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        123   124 - truncated integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        124   125 - leading ff in integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        124   125 - leading ff in integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        125   126 - leading ff in integer.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        125   126 - leading ff in integer.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        126   127 - replaced integer by infinity.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        126   127 - replaced integer by infinity.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        127   128 - replaced integer by infinity.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        127   128 - replaced integer by infinity.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        128   129 - replacing integer with zero.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        128   129 - replacing integer with zero.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        129   130 - replacing integer with zero.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        129   130 - replacing integer with zero.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        142   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        142   143 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        143   144 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        143   144 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        144   145 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        144   145 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        145   146 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        145   146 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        146   147 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        146   147 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        147   148 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        147   148 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        148   149 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        148   149 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        149   150 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        149   150 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        150   151 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        150   151 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        151   152 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        151   152 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        152   153 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        152   153 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        153   154 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        153   154 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        154   155 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        154   155 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        155   156 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        155   156 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        156   157 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        156   157 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        157   158 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        157   158 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        158   159 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        158   159 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        159   160 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        159   160 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        160   161 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        160   161 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        161   162 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        161   162 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        162   163 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        162   163 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        163   164 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        163   164 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        164   165 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        164   165 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        165   166 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        165   166 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        166   167 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        166   167 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        167   168 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        167   168 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        168   169 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        168   169 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        169   170 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        169   170 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        170   171 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        170   171 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        171   172 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        171   172 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        172   173 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        172   173 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        173   174 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        173   174 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        174   175 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        174   175 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        175   176 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        175   176 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        176   177 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        176   177 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        177   178 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        177   178 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        178   179 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        178   179 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        179   180 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        179   180 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        180   181 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        180   181 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        181   182 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        181   182 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        182   183 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        182   183 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        183   184 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        183   184 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        184   185 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        184   185 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        185   186 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        185   186 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        186   187 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        186   187 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        187   188 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        187   188 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        188   189 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        188   189 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        189   190 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        189   190 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        190   191 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        190   191 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        191   192 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        191   192 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        192   193 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        192   193 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        193   194 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        193   194 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        194   195 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        194   195 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        195   196 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        195   196 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        196   197 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        196   197 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        197   198 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        197   198 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        198   199 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        198   199 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        199   200 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        199   200 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        200   201 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        200   201 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        201   202 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        201   202 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        202   203 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        202   203 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        203   204 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        203   204 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        204   205 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        204   205 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        205   206 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        205   206 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        206   207 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        206   207 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        207   208 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        207   208 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        208   209 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        208   209 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        209   210 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        209   210 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        210   211 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        210   211 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        211   212 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        211   212 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        212   213 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        212   213 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        213   214 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        213   214 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        214   215 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        214   215 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        215   216 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        215   216 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        216   217 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        216   217 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        217   218 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        217   218 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        218   219 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        218   219 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        219   220 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        219   220 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        220   221 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        220   221 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        221   222 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        221   222 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        222   223 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        222   223 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        223   224 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        223   224 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        224   225 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        224   225 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        225   226 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        225   226 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        226   227 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        226   227 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        227   228 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        227   228 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        228   229 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        228   229 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        229   230 - Edge case for Shamir multiplication.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        229   230 - Edge case for Shamir multiplication.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        230   231 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        230   231 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        231   232 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        231   232 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        232   233 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        232   233 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        233   234 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        233   234 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        234   235 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        234   235 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        235   236 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        235   236 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        236   237 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        236   237 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        237   238 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        237   238 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        238   239 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        238   239 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        239   240 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        239   240 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        240   241 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        240   241 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        241   242 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        241   242 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        242   243 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        242   243 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        243   244 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        243   244 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        244   245 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        244   245 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        245   246 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        245   246 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        246   247 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        246   247 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        247   248 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        247   248 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        248   249 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        248   249 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        249   250 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        249   250 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        250   251 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        250   251 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        251   252 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        251   252 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        252   253 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        252   253 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        253   254 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        253   254 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        254   255 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        254   255 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        255   256 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        255   256 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        256   257 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        256   257 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        257   258 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        257   258 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        258   259 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        258   259 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        259   260 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        259   260 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        260   261 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        260   261 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        261   262 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        261   262 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        262   263 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        262   263 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        263   264 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        263   264 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        264   265 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        264   265 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        265   266 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        265   266 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        266   267 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        266   267 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        267   268 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        267   268 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        268   269 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        268   269 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        269   270 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        269   270 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        270   271 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        270   271 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        271   272 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        271   272 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        272   273 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        272   273 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        273   274 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        273   274 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        274   275 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        274   275 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        275   276 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        275   276 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        276   277 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        276   277 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        277   278 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        277   278 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        278   279 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        278   279 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        279   280 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        279   280 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        280   281 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        280   281 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        281   282 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        281   282 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        282   283 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        282   283 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        283   284 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        283   284 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        284   285 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        284   285 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        285   286 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        285   286 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        286   287 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        286   287 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        287   288 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        287   288 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        288   289 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        288   289 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        289   290 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        289   290 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        290   291 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        290   291 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        291   292 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        291   292 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        292   293 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        292   293 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        293   294 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        293   294 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        294   295 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        294   295 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        295   296 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        295   296 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        296   297 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        296   297 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        297   298 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        297   298 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        298   299 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        298   299 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        299   300 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        299   300 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        300   301 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        300   301 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        301   302 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        301   302 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        302   303 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        302   303 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        303   304 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        303   304 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        304   305 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        304   305 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        305   306 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        305   306 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        306   307 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        306   307 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        307   308 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        307   308 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        308   309 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        308   309 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        309   310 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        309   310 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        310   311 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        310   311 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        311   312 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        311   312 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        312   313 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        312   313 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        313   314 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        313   314 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        314   315 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        314   315 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        315   316 - special case hash.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        315   316 - special case hash.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        316   317 - k*G has a large x-coordinate.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        316   317 - k*G has a large x-coordinate.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        317   318 - r too large.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        317   318 - r too large.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        318   319 - r,s are large.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        318   319 - r,s are large.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        319   320 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        319   320 - r and s^-1 have a large Hamming weight.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        320   321 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        320   321 - r and s^-1 have a large Hamming weight.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        321   322 - small r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        321   322 - small r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        322   323 - small r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        322   323 - small r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        323   324 - small r and s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        323   324 - small r and s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        324   325 - r is larger than n.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        324   325 - r is larger than n.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        325   326 - s is larger than n.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        325   326 - s is larger than n.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        326   327 - small r and s^-1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        326   327 - small r and s^-1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        327   328 - smallish r and s^-1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        327   328 - smallish r and s^-1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        328   329 - 100-bit r and small s^-1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        328   329 - 100-bit r and small s^-1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        329   330 - small r and 100 bit s^-1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        329   330 - small r and 100 bit s^-1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        330   331 - 100-bit r and s^-1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        330   331 - 100-bit r and s^-1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        331   332 - r and s^-1 are close to n.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        331   332 - r and s^-1 are close to n.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        332   333 - s == 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        332   333 - s == 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        333   334 - s == 0.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        333   334 - s == 0.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        334   335 - point at infinity during verify.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        334   335 - point at infinity during verify.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        335   336 - edge case for signature malleability.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        335   336 - edge case for signature malleability.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        336   337 - edge case for signature malleability.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        336   337 - edge case for signature malleability.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        337   338 - u1 == 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        337   338 - u1 == 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        338   339 - u1 == n - 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        338   339 - u1 == n - 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        339   340 - u2 == 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        339   340 - u2 == 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        340   341 - u2 == n - 1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        340   341 - u2 == n - 1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        341   342 - edge case for u1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        341   342 - edge case for u1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        342   343 - edge case for u1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        342   343 - edge case for u1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        343   344 - edge case for u1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        343   344 - edge case for u1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        344   345 - edge case for u1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        344   345 - edge case for u1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        345   346 - edge case for u1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        345   346 - edge case for u1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        346   347 - edge case for u1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        346   347 - edge case for u1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        347   348 - edge case for u1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        347   348 - edge case for u1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        348   349 - edge case for u1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        348   349 - edge case for u1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        349   350 - edge case for u1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        349   350 - edge case for u1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        350   351 - edge case for u1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        350   351 - edge case for u1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        351   352 - edge case for u1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        351   352 - edge case for u1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        352   353 - edge case for u1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        352   353 - edge case for u1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        353   354 - edge case for u1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        353   354 - edge case for u1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        354   355 - edge case for u2.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        354   355 - edge case for u2.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        355   356 - edge case for u2.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        355   356 - edge case for u2.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        356   357 - edge case for u2.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        356   357 - edge case for u2.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        357   358 - edge case for u2.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        357   358 - edge case for u2.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        358   359 - edge case for u2.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        358   359 - edge case for u2.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        359   360 - edge case for u2.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        359   360 - edge case for u2.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        360   361 - edge case for u2.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        360   361 - edge case for u2.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        361   362 - edge case for u2.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        361   362 - edge case for u2.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        362   363 - edge case for u2.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        362   363 - edge case for u2.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        363   364 - edge case for u2.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        363   364 - edge case for u2.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        364   365 - edge case for u2.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        364   365 - edge case for u2.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        365   366 - edge case for u2.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        365   366 - edge case for u2.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        366   367 - edge case for u2.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        366   367 - edge case for u2.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        367   368 - point duplication during verification.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        367   368 - point duplication during verification.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        368   369 - duplication bug.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        368   369 - duplication bug.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        369   370 - comparison with point at infinity .
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        369   370 - comparison with point at infinity .
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        370   371 - extreme value for k and edgecase s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        370   371 - extreme value for k and edgecase s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        371   372 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        371   372 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        372   373 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        372   373 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        373   374 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        373   374 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        374   375 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        374   375 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        375   376 - extreme value for k.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        375   376 - extreme value for k.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        376   377 - extreme value for k and edgecase s.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        376   377 - extreme value for k and edgecase s.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        377   378 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        377   378 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        378   379 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        378   379 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        379   380 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        379   380 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        380   381 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        380   381 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        381   382 - extreme value for k.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        381   382 - extreme value for k.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        382   383 - testing point duplication.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        382   383 - testing point duplication.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        383   384 - testing point duplication.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        383   384 - testing point duplication.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        384   385 - testing point duplication.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        384   385 - testing point duplication.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        385   386 - testing point duplication.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        385   386 - testing point duplication.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        386   387 - pseudorandom signature.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        386   387 - pseudorandom signature.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        387   388 - pseudorandom signature.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        387   388 - pseudorandom signature.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        388   389 - pseudorandom signature.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        388   389 - pseudorandom signature.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        389   390 - pseudorandom signature.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        389   390 - pseudorandom signature.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        390   391 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        390   391 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        391   392 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        391   392 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        392   393 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        392   393 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        393   394 - x-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        393   394 - x-coordinate of the public key is large.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        394   395 - x-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        394   395 - x-coordinate of the public key is large.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        395   396 - x-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        395   396 - x-coordinate of the public key is large.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        396   397 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        396   397 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        397   398 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        397   398 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        398   399 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        398   399 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        399   400 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        399   400 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        400   401 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        400   401 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        401   402 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        401   402 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        402   403 - x-coordinate of the public key is large on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        402   403 - x-coordinate of the public key is large on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        403   404 - x-coordinate of the public key is large on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        403   404 - x-coordinate of the public key is large on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        404   405 - x-coordinate of the public key is large on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        404   405 - x-coordinate of the public key is large on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        405   406 - x-coordinate of the public key is small on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        405   406 - x-coordinate of the public key is small on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        406   407 - x-coordinate of the public key is small on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        406   407 - x-coordinate of the public key is small on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        407   408 - x-coordinate of the public key is small on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        407   408 - x-coordinate of the public key is small on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        408   409 - x-coordinate of the public key has many trailing 0's on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        408   409 - x-coordinate of the public key has many trailing 0's on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        409   410 - x-coordinate of the public key has many trailing 0's on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        409   410 - x-coordinate of the public key has many trailing 0's on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        410   411 - x-coordinate of the public key has many trailing 0's on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        410   411 - x-coordinate of the public key has many trailing 0's on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        411   412 - y-coordinate of the public key has many trailing 1's on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        411   412 - y-coordinate of the public key has many trailing 1's on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        412   413 - y-coordinate of the public key has many trailing 1's on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        412   413 - y-coordinate of the public key has many trailing 1's on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        413   414 - y-coordinate of the public key has many trailing 1's on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        413   414 - y-coordinate of the public key has many trailing 1's on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        414   415 - y-coordinate of the public key has many trailing 0's on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        414   415 - y-coordinate of the public key has many trailing 0's on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        415   416 - y-coordinate of the public key has many trailing 0's on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        415   416 - y-coordinate of the public key has many trailing 0's on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        416   417 - y-coordinate of the public key has many trailing 0's on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        416   417 - y-coordinate of the public key has many trailing 0's on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        417   418 - y-coordinate of the public key has many trailing 0's on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        417   418 - y-coordinate of the public key has many trailing 0's on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        418   419 - y-coordinate of the public key has many trailing 0's on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        418   419 - y-coordinate of the public key has many trailing 0's on brainpoolP384t1.
 ...                ECDSA BrainpoolP384r1 test vectors (SHA384)        419   420 - y-coordinate of the public key has many trailing 0's on brainpoolP384t1.
[OK]                ECDSA BrainpoolP384r1 test vectors (SHA384)        419   420 - y-coordinate of the public key has many trailing 0's on brainpoolP384t1.
 ...                ECDH BrainpoolP512r1 test vectors                    0   1 - normal case.
[OK]                ECDH BrainpoolP512r1 test vectors                    0   1 - normal case.
 ...                ECDH BrainpoolP512r1 test vectors                    1   2 - compressed public key.
[OK]                ECDH BrainpoolP512r1 test vectors                    1   2 - compressed public key.
 ...                ECDH BrainpoolP512r1 test vectors                    2   3 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                    2   3 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                    3   4 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                    3   4 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                    4   5 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                    4   5 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                    5   6 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                    5   6 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                    6   7 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                    6   7 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                    7   8 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                    7   8 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                    8   9 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                    8   9 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                    9   10 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                    9   10 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                   10   11 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                   10   11 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                   11   12 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                   11   12 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                   12   13 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                   12   13 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                   13   14 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                   13   14 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                   14   15 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                   14   15 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                   15   16 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                   15   16 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                   16   17 - edge case for shared secret.
[OK]                ECDH BrainpoolP512r1 test vectors                   16   17 - edge case for shared secret.
 ...                ECDH BrainpoolP512r1 test vectors                   17   18 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   17   18 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   18   19 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   18   19 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   19   20 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   19   20 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   20   21 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   20   21 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   21   22 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   21   22 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   22   23 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   22   23 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   23   24 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   23   24 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   24   25 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   24   25 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   25   26 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   25   26 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   26   27 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   26   27 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   27   28 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   27   28 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   28   29 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   28   29 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   29   30 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   29   30 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   30   31 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   30   31 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   31   32 - edge cases for ephemeral key.
[OK]                ECDH BrainpoolP512r1 test vectors                   31   32 - edge cases for ephemeral key.
 ...                ECDH BrainpoolP512r1 test vectors                   32   33 - edge case for Jacobian and projective coordinates.
[OK]                ECDH BrainpoolP512r1 test vectors                   32   33 - edge case for Jacobian and projective coordinates.
 ...                ECDH BrainpoolP512r1 test vectors                   33   34 - edge case for Jacobian and projective coordinates.
[OK]                ECDH BrainpoolP512r1 test vectors                   33   34 - edge case for Jacobian and projective coordinates.
 ...                ECDH BrainpoolP512r1 test vectors                   34   35 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   34   35 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   35   36 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   35   36 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   36   37 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   36   37 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   37   38 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   37   38 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   38   39 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   38   39 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   39   40 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   39   40 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   40   41 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   40   41 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   41   42 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   41   42 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   42   43 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   42   43 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   43   44 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   43   44 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   44   45 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   44   45 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   45   46 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   45   46 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   46   47 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   46   47 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   47   48 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   47   48 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   48   49 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   48   49 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   49   50 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   49   50 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   50   51 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   50   51 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   51   52 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   51   52 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   52   53 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   52   53 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   53   54 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   53   54 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   54   55 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   54   55 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   55   56 - edge case for Jacobian and projective coordinates in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   55   56 - edge case for Jacobian and projective coordinates in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   56   57 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   56   57 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   57   58 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   57   58 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   58   59 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   58   59 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   59   60 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   59   60 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   60   61 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   60   61 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   61   62 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   61   62 - edge case for Jacobian and projective coordinates in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   62   63 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   62   63 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   63   64 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   63   64 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   64   65 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   64   65 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   65   66 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   65   66 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   66   67 - edge case for Jacobian and projective coordinates in right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   66   67 - edge case for Jacobian and projective coordinates in right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   67   68 - point with coordinate x = -1.
[OK]                ECDH BrainpoolP512r1 test vectors                   67   68 - point with coordinate x = -1.
 ...                ECDH BrainpoolP512r1 test vectors                   68   69 - point with coordinate x = -1.
[OK]                ECDH BrainpoolP512r1 test vectors                   68   69 - point with coordinate x = -1.
 ...                ECDH BrainpoolP512r1 test vectors                   69   70 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   69   70 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   70   71 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   70   71 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   71   72 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   71   72 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   72   73 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   72   73 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   73   74 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   73   74 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   74   75 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   74   75 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   75   76 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   75   76 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   76   77 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   76   77 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   77   78 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   77   78 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   78   79 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   78   79 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   79   80 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   79   80 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   80   81 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   80   81 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   81   82 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   81   82 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   82   83 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   82   83 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   83   84 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   83   84 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   84   85 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   84   85 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   85   86 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   85   86 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   86   87 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   86   87 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   87   88 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   87   88 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   88   89 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   88   89 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   89   90 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   89   90 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   90   91 - point with coordinate x = -1 in left to right addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   90   91 - point with coordinate x = -1 in left to right addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   91   92 - point with coordinate x = -1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   91   92 - point with coordinate x = -1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   92   93 - point with coordinate x = -1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   92   93 - point with coordinate x = -1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   93   94 - point with coordinate x = -1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   93   94 - point with coordinate x = -1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   94   95 - point with coordinate x = -1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   94   95 - point with coordinate x = -1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   95   96 - point with coordinate x = -1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   95   96 - point with coordinate x = -1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   96   97 - point with coordinate x = -1 in precomputation or right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   96   97 - point with coordinate x = -1 in precomputation or right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   97   98 - point with coordinate x = -1 in right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   97   98 - point with coordinate x = -1 in right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   98   99 - point with coordinate x = -1 in right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   98   99 - point with coordinate x = -1 in right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                   99   100 - point with coordinate x = -1 in right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                   99   100 - point with coordinate x = -1 in right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                  100   101 - point with coordinate x = -1 in right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                  100   101 - point with coordinate x = -1 in right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                  101   102 - point with coordinate x = -1 in right to left addition chain.
[OK]                ECDH BrainpoolP512r1 test vectors                  101   102 - point with coordinate x = -1 in right to left addition chain.
 ...                ECDH BrainpoolP512r1 test vectors                  102   103 - edge case private key.
[OK]                ECDH BrainpoolP512r1 test vectors                  102   103 - edge case private key.
 ...                ECDH BrainpoolP512r1 test vectors                  103   104 - edge case private key.
[OK]                ECDH BrainpoolP512r1 test vectors                  103   104 - edge case private key.
 ...                ECDH BrainpoolP512r1 test vectors                  104   105 - edge case private key.
[OK]                ECDH BrainpoolP512r1 test vectors                  104   105 - edge case private key.
 ...                ECDH BrainpoolP512r1 test vectors                  105   106 - edge case private key.
[OK]                ECDH BrainpoolP512r1 test vectors                  105   106 - edge case private key.
 ...                ECDH BrainpoolP512r1 test vectors                  106   107 - edge case private key.
[OK]                ECDH BrainpoolP512r1 test vectors                  106   107 - edge case private key.
 ...                ECDH BrainpoolP512r1 test vectors                  107   108 - edge case private key.
[OK]                ECDH BrainpoolP512r1 test vectors                  107   108 - edge case private key.
 ...                ECDH BrainpoolP512r1 test vectors                  108   109 - edge case private key.
[OK]                ECDH BrainpoolP512r1 test vectors                  108   109 - edge case private key.
 ...                ECDH BrainpoolP512r1 test vectors                  109   110 - edge case private key.
[OK]                ECDH BrainpoolP512r1 test vectors                  109   110 - edge case private key.
 ...                ECDH BrainpoolP512r1 test vectors                  110   111 - edge case private key.
[OK]                ECDH BrainpoolP512r1 test vectors                  110   111 - edge case private key.
 ...                ECDH BrainpoolP512r1 test vectors                  111   112 - edge case private key.
[OK]                ECDH BrainpoolP512r1 test vectors                  111   112 - edge case private key.
 ...                ECDH BrainpoolP512r1 test vectors                  112   113 - edge case private key.
[OK]                ECDH BrainpoolP512r1 test vectors                  112   113 - edge case private key.
 ...                ECDH BrainpoolP512r1 test vectors                  113   114 - edge case private key.
[OK]                ECDH BrainpoolP512r1 test vectors                  113   114 - edge case private key.
 ...                ECDH BrainpoolP512r1 test vectors                  114   115 - edge case private key.
[OK]                ECDH BrainpoolP512r1 test vectors                  114   115 - edge case private key.
 ...                ECDH BrainpoolP512r1 test vectors                  115   116 - edge case private key.
[OK]                ECDH BrainpoolP512r1 test vectors                  115   116 - edge case private key.
 ...                ECDH BrainpoolP512r1 test vectors                  116   117 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  116   117 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  117   118 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  117   118 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  118   119 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  118   119 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  119   120 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  119   120 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  120   121 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  120   121 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  121   122 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  121   122 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  122   123 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  122   123 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  123   124 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  123   124 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  124   125 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  124   125 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  125   126 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  125   126 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  126   127 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  126   127 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  127   128 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  127   128 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  128   129 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  128   129 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  129   130 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  129   130 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  130   131 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  130   131 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  131   132 - point is not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  131   132 - point is not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  132   133 - public key uses brainpoolP512t1 with a point shared with brainpoolP512r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  132   133 - public key uses brainpoolP512t1 with a point shared with brainpoolP512r1.
 ...                ECDH BrainpoolP512r1 test vectors                  133   134 - public key uses brainpoolP512t1 with a point shared with brainpoolP512r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  133   134 - public key uses brainpoolP512t1 with a point shared with brainpoolP512r1.
 ...                ECDH BrainpoolP512r1 test vectors                  134   135 - public key is a low order invalid point on brainpoolP512t1.  The point of the public key is a valid on brainpoolP512r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  134   135 - public key is a low order invalid point on brainpoolP512t1.  The point of the public key is a valid on brainpoolP512r1.
 ...                ECDH BrainpoolP512r1 test vectors                  135   136 - public key is a low order invalid point on brainpoolP512t1.  The point of the public key is a valid on brainpoolP512r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  135   136 - public key is a low order invalid point on brainpoolP512t1.  The point of the public key is a valid on brainpoolP512r1.
 ...                ECDH BrainpoolP512r1 test vectors                  136   137 - public key is a low order invalid point on brainpoolP512t1.  The point of the public key is a valid on brainpoolP512r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  136   137 - public key is a low order invalid point on brainpoolP512t1.  The point of the public key is a valid on brainpoolP512r1.
 ...                ECDH BrainpoolP512r1 test vectors                  137   138 - public key is a low order invalid point on brainpoolP512t1.  The point of the public key is a valid on brainpoolP512r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  137   138 - public key is a low order invalid point on brainpoolP512t1.  The point of the public key is a valid on brainpoolP512r1.
 ...                ECDH BrainpoolP512r1 test vectors                  138   139 - public key is a low order invalid point on brainpoolP512t1.  The point of the public key is a valid on brainpoolP512r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  138   139 - public key is a low order invalid point on brainpoolP512t1.  The point of the public key is a valid on brainpoolP512r1.
 ...                ECDH BrainpoolP512r1 test vectors                  139   140 - public key is a low order invalid point on brainpoolP512t1.  The point of the public key is a valid on brainpoolP512r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  139   140 - public key is a low order invalid point on brainpoolP512t1.  The point of the public key is a valid on brainpoolP512r1.
 ...                ECDH BrainpoolP512r1 test vectors                  140   141 - .
[OK]                ECDH BrainpoolP512r1 test vectors                  140   141 - .
 ...                ECDH BrainpoolP512r1 test vectors                  141   142 - public point not on curve.
[OK]                ECDH BrainpoolP512r1 test vectors                  141   142 - public point not on curve.
 ...                ECDH BrainpoolP512r1 test vectors                  142   143 - public point = (0,0).
[OK]                ECDH BrainpoolP512r1 test vectors                  142   143 - public point = (0,0).
 ...                ECDH BrainpoolP512r1 test vectors                  143   156 - using secp224r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  143   156 - using secp224r1.
 ...                ECDH BrainpoolP512r1 test vectors                  144   157 - using secp256r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  144   157 - using secp256r1.
 ...                ECDH BrainpoolP512r1 test vectors                  145   158 - using secp256k1.
[OK]                ECDH BrainpoolP512r1 test vectors                  145   158 - using secp256k1.
 ...                ECDH BrainpoolP512r1 test vectors                  146   161 - public key on isomorphic curve brainpoolP512t1.
[OK]                ECDH BrainpoolP512r1 test vectors                  146   161 - public key on isomorphic curve brainpoolP512t1.
 ...                ECDH BrainpoolP512r1 test vectors                  147   162 - Public key uses wrong curve: secp224r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  147   162 - Public key uses wrong curve: secp224r1.
 ...                ECDH BrainpoolP512r1 test vectors                  148   163 - Public key uses wrong curve: secp256r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  148   163 - Public key uses wrong curve: secp256r1.
 ...                ECDH BrainpoolP512r1 test vectors                  149   164 - Public key uses wrong curve: secp384r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  149   164 - Public key uses wrong curve: secp384r1.
 ...                ECDH BrainpoolP512r1 test vectors                  150   165 - Public key uses wrong curve: secp521r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  150   165 - Public key uses wrong curve: secp521r1.
 ...                ECDH BrainpoolP512r1 test vectors                  151   166 - Public key uses wrong curve: secp256k1.
[OK]                ECDH BrainpoolP512r1 test vectors                  151   166 - Public key uses wrong curve: secp256k1.
 ...                ECDH BrainpoolP512r1 test vectors                  152   167 - Public key uses wrong curve: secp224k1.
[OK]                ECDH BrainpoolP512r1 test vectors                  152   167 - Public key uses wrong curve: secp224k1.
 ...                ECDH BrainpoolP512r1 test vectors                  153   168 - Public key uses wrong curve: brainpoolP224r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  153   168 - Public key uses wrong curve: brainpoolP224r1.
 ...                ECDH BrainpoolP512r1 test vectors                  154   169 - Public key uses wrong curve: brainpoolP256r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  154   169 - Public key uses wrong curve: brainpoolP256r1.
 ...                ECDH BrainpoolP512r1 test vectors                  155   170 - Public key uses wrong curve: brainpoolP320r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  155   170 - Public key uses wrong curve: brainpoolP320r1.
 ...                ECDH BrainpoolP512r1 test vectors                  156   171 - Public key uses wrong curve: brainpoolP384r1.
[OK]                ECDH BrainpoolP512r1 test vectors                  156   171 - Public key uses wrong curve: brainpoolP384r1.
 ...                ECDH BrainpoolP512r1 test vectors                  157   172 - Public key uses wrong curve: brainpoolP224t1.
[OK]                ECDH BrainpoolP512r1 test vectors                  157   172 - Public key uses wrong curve: brainpoolP224t1.
 ...                ECDH BrainpoolP512r1 test vectors                  158   173 - Public key uses wrong curve: brainpoolP256t1.
[OK]                ECDH BrainpoolP512r1 test vectors                  158   173 - Public key uses wrong curve: brainpoolP256t1.
 ...                ECDH BrainpoolP512r1 test vectors                  159   174 - Public key uses wrong curve: brainpoolP320t1.
[OK]                ECDH BrainpoolP512r1 test vectors                  159   174 - Public key uses wrong curve: brainpoolP320t1.
 ...                ECDH BrainpoolP512r1 test vectors                  160   175 - Public key uses wrong curve: brainpoolP384t1.
[OK]                ECDH BrainpoolP512r1 test vectors                  160   175 - Public key uses wrong curve: brainpoolP384t1.
 ...                ECDH BrainpoolP512r1 test vectors                  161   176 - Public key uses wrong curve: brainpoolP512t1.
[OK]                ECDH BrainpoolP512r1 test vectors                  161   176 - Public key uses wrong curve: brainpoolP512t1.
 ...                ECDH BrainpoolP512r1 test vectors                  162   177 - Public key uses wrong curve: FRP256v1.
[OK]                ECDH BrainpoolP512r1 test vectors                  162   177 - Public key uses wrong curve: FRP256v1.
 ...                ECDH BrainpoolP512r1 test vectors                  163   178 - invalid public key.
[OK]                ECDH BrainpoolP512r1 test vectors                  163   178 - invalid public key.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)          0   1 - signature malleability.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)          0   1 - signature malleability.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)          1   2 - valid.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)          1   2 - valid.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)          2   3 - length of sequence contains leading 0.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)          2   3 - length of sequence contains leading 0.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)          3   4 - wrong length of sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)          3   4 - wrong length of sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)          4   5 - wrong length of sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)          4   5 - wrong length of sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)          5   6 - uint32 overflow in length of sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)          5   6 - uint32 overflow in length of sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)          6   7 - uint64 overflow in length of sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)          6   7 - uint64 overflow in length of sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)          7   8 - length of sequence = 2**31 - 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)          7   8 - length of sequence = 2**31 - 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)          8   9 - length of sequence = 2**32 - 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)          8   9 - length of sequence = 2**32 - 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)          9   10 - length of sequence = 2**40 - 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)          9   10 - length of sequence = 2**40 - 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         10   11 - length of sequence = 2**64 - 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         10   11 - length of sequence = 2**64 - 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         11   12 - incorrect length of sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         11   12 - incorrect length of sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         12   13 - indefinite length without termination.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         12   13 - indefinite length without termination.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         13   14 - indefinite length without termination.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         13   14 - indefinite length without termination.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         14   15 - indefinite length without termination.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         14   15 - indefinite length without termination.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         15   16 - removing sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         15   16 - removing sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         16   17 - lonely sequence tag.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         16   17 - lonely sequence tag.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         17   18 - appending 0's to sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         17   18 - appending 0's to sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         18   19 - prepending 0's to sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         18   19 - prepending 0's to sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         19   20 - appending unused 0's to sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         19   20 - appending unused 0's to sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         20   21 - appending null value to sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         20   21 - appending null value to sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         21   22 - including garbage.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         21   22 - including garbage.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         22   23 - including garbage.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         22   23 - including garbage.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         23   24 - including garbage.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         23   24 - including garbage.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         24   25 - including garbage.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         24   25 - including garbage.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         25   26 - including garbage.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         25   26 - including garbage.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         26   27 - including garbage.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         26   27 - including garbage.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         27   28 - including garbage.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         27   28 - including garbage.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         28   29 - including garbage.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         28   29 - including garbage.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         29   30 - including garbage.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         29   30 - including garbage.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         30   31 - including undefined tags.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         30   31 - including undefined tags.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         31   32 - including undefined tags.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         31   32 - including undefined tags.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         32   33 - including undefined tags.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         32   33 - including undefined tags.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         33   34 - including undefined tags.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         33   34 - including undefined tags.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         34   35 - including undefined tags.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         34   35 - including undefined tags.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         35   36 - including undefined tags.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         35   36 - including undefined tags.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         36   37 - truncated length of sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         36   37 - truncated length of sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         37   38 - using composition with indefinite length.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         37   38 - using composition with indefinite length.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         38   39 - using composition with indefinite length.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         38   39 - using composition with indefinite length.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         39   40 - using composition with indefinite length.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         39   40 - using composition with indefinite length.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         40   41 - using composition with wrong tag.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         40   41 - using composition with wrong tag.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         41   42 - using composition with wrong tag.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         41   42 - using composition with wrong tag.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         42   43 - using composition with wrong tag.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         42   43 - using composition with wrong tag.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         43   44 - Replacing sequence with NULL.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         43   44 - Replacing sequence with NULL.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         44   45 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         44   45 - changing tag value of sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         45   46 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         45   46 - changing tag value of sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         46   47 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         46   47 - changing tag value of sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         47   48 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         47   48 - changing tag value of sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         48   49 - changing tag value of sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         48   49 - changing tag value of sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         49   50 - dropping value of sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         49   50 - dropping value of sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         50   51 - using composition for sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         50   51 - using composition for sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         51   52 - truncated sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         51   52 - truncated sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         52   53 - truncated sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         52   53 - truncated sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         53   54 - indefinite length.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         53   54 - indefinite length.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         54   55 - indefinite length with truncated delimiter.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         54   55 - indefinite length with truncated delimiter.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         55   56 - indefinite length with additional element.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         55   56 - indefinite length with additional element.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         56   57 - indefinite length with truncated element.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         56   57 - indefinite length with truncated element.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         57   58 - indefinite length with garbage.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         57   58 - indefinite length with garbage.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         58   59 - indefinite length with nonempty EOC.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         58   59 - indefinite length with nonempty EOC.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         59   60 - prepend empty sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         59   60 - prepend empty sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         60   61 - append empty sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         60   61 - append empty sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         61   62 - append garbage with high tag number.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         61   62 - append garbage with high tag number.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         62   63 - sequence of sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         62   63 - sequence of sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         63   64 - truncated sequence: removed last 1 elements.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         63   64 - truncated sequence: removed last 1 elements.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         64   65 - repeating element in sequence.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         64   65 - repeating element in sequence.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         65   66 - long form encoding of length of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         65   66 - long form encoding of length of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         66   67 - long form encoding of length of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         66   67 - long form encoding of length of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         67   68 - length of integer contains leading 0.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         67   68 - length of integer contains leading 0.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         68   69 - length of integer contains leading 0.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         68   69 - length of integer contains leading 0.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         69   70 - wrong length of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         69   70 - wrong length of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         70   71 - wrong length of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         70   71 - wrong length of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         71   72 - wrong length of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         71   72 - wrong length of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         72   73 - wrong length of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         72   73 - wrong length of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         73   74 - uint32 overflow in length of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         73   74 - uint32 overflow in length of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         74   75 - uint32 overflow in length of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         74   75 - uint32 overflow in length of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         75   76 - uint64 overflow in length of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         75   76 - uint64 overflow in length of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         76   77 - uint64 overflow in length of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         76   77 - uint64 overflow in length of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         77   78 - length of integer = 2**31 - 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         77   78 - length of integer = 2**31 - 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         78   79 - length of integer = 2**31 - 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         78   79 - length of integer = 2**31 - 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         79   80 - length of integer = 2**32 - 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         79   80 - length of integer = 2**32 - 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         80   81 - length of integer = 2**32 - 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         80   81 - length of integer = 2**32 - 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         81   82 - length of integer = 2**40 - 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         81   82 - length of integer = 2**40 - 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         82   83 - length of integer = 2**40 - 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         82   83 - length of integer = 2**40 - 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         83   84 - length of integer = 2**64 - 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         83   84 - length of integer = 2**64 - 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         84   85 - length of integer = 2**64 - 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         84   85 - length of integer = 2**64 - 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         85   86 - incorrect length of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         85   86 - incorrect length of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         86   87 - incorrect length of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         86   87 - incorrect length of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         87   88 - removing integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         87   88 - removing integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         88   89 - lonely integer tag.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         88   89 - lonely integer tag.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         89   90 - lonely integer tag.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         89   90 - lonely integer tag.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         90   91 - appending 0's to integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         90   91 - appending 0's to integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         91   92 - appending 0's to integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         91   92 - appending 0's to integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         92   93 - prepending 0's to integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         92   93 - prepending 0's to integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         93   94 - prepending 0's to integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         93   94 - prepending 0's to integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         94   95 - appending unused 0's to integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         94   95 - appending unused 0's to integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         95   96 - appending null value to integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         95   96 - appending null value to integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         96   97 - appending null value to integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         96   97 - appending null value to integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         97   98 - truncated length of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         97   98 - truncated length of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         98   99 - truncated length of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         98   99 - truncated length of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)         99   100 - Replacing integer with NULL.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)         99   100 - Replacing integer with NULL.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        100   101 - Replacing integer with NULL.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        100   101 - Replacing integer with NULL.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        101   102 - changing tag value of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        101   102 - changing tag value of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        102   103 - changing tag value of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        102   103 - changing tag value of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        103   104 - changing tag value of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        103   104 - changing tag value of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        104   105 - changing tag value of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        104   105 - changing tag value of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        105   106 - changing tag value of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        105   106 - changing tag value of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        106   107 - changing tag value of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        106   107 - changing tag value of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        107   108 - changing tag value of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        107   108 - changing tag value of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        108   109 - changing tag value of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        108   109 - changing tag value of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        109   110 - changing tag value of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        109   110 - changing tag value of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        110   111 - changing tag value of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        110   111 - changing tag value of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        111   112 - dropping value of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        111   112 - dropping value of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        112   113 - dropping value of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        112   113 - dropping value of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        113   114 - using composition for integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        113   114 - using composition for integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        114   115 - using composition for integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        114   115 - using composition for integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        115   116 - modify first byte of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        115   116 - modify first byte of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        116   117 - modify first byte of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        116   117 - modify first byte of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        117   118 - modify last byte of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        117   118 - modify last byte of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        118   119 - modify last byte of integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        118   119 - modify last byte of integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        119   120 - truncated integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        119   120 - truncated integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        120   121 - truncated integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        120   121 - truncated integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        121   122 - truncated integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        121   122 - truncated integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        122   123 - truncated integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        122   123 - truncated integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        123   124 - leading ff in integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        123   124 - leading ff in integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        124   125 - leading ff in integer.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        124   125 - leading ff in integer.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        125   126 - replaced integer by infinity.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        125   126 - replaced integer by infinity.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        126   127 - replaced integer by infinity.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        126   127 - replaced integer by infinity.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        127   128 - replacing integer with zero.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        127   128 - replacing integer with zero.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        128   129 - replacing integer with zero.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        128   129 - replacing integer with zero.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        129   130 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        129   130 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        130   131 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        131   132 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        132   133 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        133   134 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        134   135 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        135   136 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        136   137 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        137   138 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        138   139 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        139   140 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        140   141 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        141   142 - Modified r or s, e.g. by adding or subtracting the order of the group.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        142   143 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        142   143 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        143   144 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        143   144 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        144   145 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        144   145 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        145   146 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        145   146 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        146   147 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        146   147 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        147   148 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        147   148 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        148   149 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        148   149 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        149   150 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        149   150 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        150   151 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        150   151 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        151   152 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        151   152 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        152   153 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        152   153 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        153   154 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        153   154 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        154   155 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        154   155 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        155   156 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        155   156 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        156   157 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        156   157 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        157   158 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        157   158 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        158   159 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        158   159 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        159   160 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        159   160 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        160   161 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        160   161 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        161   162 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        161   162 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        162   163 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        162   163 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        163   164 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        163   164 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        164   165 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        164   165 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        165   166 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        165   166 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        166   167 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        166   167 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        167   168 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        167   168 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        168   169 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        168   169 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        169   170 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        169   170 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        170   171 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        170   171 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        171   172 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        171   172 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        172   173 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        172   173 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        173   174 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        173   174 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        174   175 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        174   175 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        175   176 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        175   176 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        176   177 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        176   177 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        177   178 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        177   178 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        178   179 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        178   179 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        179   180 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        179   180 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        180   181 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        180   181 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        181   182 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        181   182 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        182   183 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        182   183 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        183   184 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        183   184 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        184   185 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        184   185 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        185   186 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        185   186 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        186   187 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        186   187 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        187   188 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        187   188 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        188   189 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        188   189 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        189   190 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        189   190 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        190   191 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        190   191 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        191   192 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        191   192 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        192   193 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        192   193 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        193   194 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        193   194 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        194   195 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        194   195 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        195   196 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        195   196 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        196   197 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        196   197 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        197   198 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        197   198 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        198   199 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        198   199 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        199   200 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        199   200 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        200   201 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        200   201 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        201   202 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        201   202 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        202   203 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        202   203 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        203   204 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        203   204 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        204   205 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        204   205 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        205   206 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        205   206 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        206   207 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        206   207 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        207   208 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        207   208 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        208   209 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        208   209 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        209   210 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        209   210 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        210   211 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        210   211 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        211   212 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        211   212 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        212   213 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        212   213 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        213   214 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        213   214 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        214   215 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        214   215 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        215   216 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        215   216 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        216   217 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        216   217 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        217   218 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        217   218 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        218   219 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        218   219 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        219   220 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        219   220 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        220   221 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        220   221 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        221   222 - Signature with special case values for r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        221   222 - Signature with special case values for r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        222   223 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        222   223 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        223   224 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        223   224 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        224   225 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        224   225 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        225   226 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        225   226 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        226   227 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        226   227 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        227   228 - Signature encoding contains wrong types.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        227   228 - Signature encoding contains wrong types.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        228   229 - Edge case for Shamir multiplication.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        228   229 - Edge case for Shamir multiplication.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        229   230 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        229   230 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        230   231 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        230   231 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        231   232 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        231   232 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        232   233 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        232   233 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        233   234 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        233   234 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        234   235 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        234   235 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        235   236 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        235   236 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        236   237 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        236   237 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        237   238 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        237   238 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        238   239 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        238   239 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        239   240 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        239   240 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        240   241 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        240   241 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        241   242 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        241   242 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        242   243 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        242   243 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        243   244 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        243   244 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        244   245 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        244   245 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        245   246 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        245   246 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        246   247 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        246   247 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        247   248 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        247   248 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        248   249 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        248   249 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        249   250 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        249   250 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        250   251 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        250   251 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        251   252 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        251   252 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        252   253 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        252   253 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        253   254 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        253   254 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        254   255 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        254   255 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        255   256 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        255   256 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        256   257 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        256   257 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        257   258 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        257   258 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        258   259 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        258   259 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        259   260 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        259   260 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        260   261 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        260   261 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        261   262 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        261   262 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        262   263 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        262   263 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        263   264 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        263   264 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        264   265 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        264   265 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        265   266 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        265   266 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        266   267 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        266   267 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        267   268 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        267   268 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        268   269 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        268   269 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        269   270 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        269   270 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        270   271 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        270   271 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        271   272 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        271   272 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        272   273 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        272   273 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        273   274 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        273   274 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        274   275 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        274   275 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        275   276 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        275   276 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        276   277 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        276   277 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        277   278 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        277   278 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        278   279 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        278   279 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        279   280 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        279   280 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        280   281 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        280   281 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        281   282 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        281   282 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        282   283 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        282   283 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        283   284 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        283   284 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        284   285 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        284   285 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        285   286 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        285   286 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        286   287 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        286   287 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        287   288 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        287   288 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        288   289 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        288   289 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        289   290 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        289   290 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        290   291 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        290   291 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        291   292 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        291   292 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        292   293 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        292   293 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        293   294 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        293   294 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        294   295 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        294   295 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        295   296 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        295   296 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        296   297 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        296   297 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        297   298 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        297   298 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        298   299 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        298   299 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        299   300 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        299   300 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        300   301 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        300   301 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        301   302 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        301   302 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        302   303 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        302   303 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        303   304 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        303   304 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        304   305 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        304   305 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        305   306 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        305   306 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        306   307 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        306   307 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        307   308 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        307   308 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        308   309 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        308   309 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        309   310 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        309   310 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        310   311 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        310   311 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        311   312 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        311   312 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        312   313 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        312   313 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        313   314 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        313   314 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        314   315 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        314   315 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        315   316 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        315   316 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        316   317 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        316   317 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        317   318 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        317   318 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        318   319 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        318   319 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        319   320 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        319   320 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        320   321 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        320   321 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        321   322 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        321   322 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        322   323 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        322   323 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        323   324 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        323   324 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        324   325 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        324   325 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        325   326 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        325   326 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        326   327 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        326   327 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        327   328 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        327   328 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        328   329 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        328   329 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        329   330 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        329   330 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        330   331 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        330   331 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        331   332 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        331   332 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        332   333 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        332   333 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        333   334 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        333   334 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        334   335 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        334   335 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        335   336 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        335   336 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        336   337 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        336   337 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        337   338 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        337   338 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        338   339 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        338   339 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        339   340 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        339   340 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        340   341 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        340   341 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        341   342 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        341   342 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        342   343 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        342   343 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        343   344 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        343   344 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        344   345 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        344   345 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        345   346 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        345   346 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        346   347 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        346   347 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        347   348 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        347   348 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        348   349 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        348   349 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        349   350 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        349   350 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        350   351 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        350   351 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        351   352 - special case hash.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        351   352 - special case hash.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        352   353 - k*G has a large x-coordinate.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        352   353 - k*G has a large x-coordinate.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        353   354 - r too large.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        353   354 - r too large.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        354   355 - r,s are large.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        354   355 - r,s are large.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        355   356 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        355   356 - r and s^-1 have a large Hamming weight.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        356   357 - r and s^-1 have a large Hamming weight.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        356   357 - r and s^-1 have a large Hamming weight.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        357   358 - small r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        357   358 - small r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        358   359 - small r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        358   359 - small r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        359   360 - small r and s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        359   360 - small r and s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        360   361 - r is larger than n.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        360   361 - r is larger than n.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        361   362 - s is larger than n.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        361   362 - s is larger than n.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        362   363 - small r and s^-1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        362   363 - small r and s^-1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        363   364 - smallish r and s^-1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        363   364 - smallish r and s^-1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        364   365 - 100-bit r and small s^-1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        364   365 - 100-bit r and small s^-1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        365   366 - small r and 100 bit s^-1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        365   366 - small r and 100 bit s^-1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        366   367 - 100-bit r and s^-1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        366   367 - 100-bit r and s^-1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        367   368 - r and s^-1 are close to n.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        367   368 - r and s^-1 are close to n.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        368   369 - s == 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        368   369 - s == 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        369   370 - s == 0.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        369   370 - s == 0.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        370   371 - point at infinity during verify.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        370   371 - point at infinity during verify.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        371   372 - edge case for signature malleability.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        371   372 - edge case for signature malleability.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        372   373 - edge case for signature malleability.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        372   373 - edge case for signature malleability.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        373   374 - u1 == 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        373   374 - u1 == 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        374   375 - u1 == n - 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        374   375 - u1 == n - 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        375   376 - u2 == 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        375   376 - u2 == 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        376   377 - u2 == n - 1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        376   377 - u2 == n - 1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        377   378 - edge case for u1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        377   378 - edge case for u1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        378   379 - edge case for u1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        378   379 - edge case for u1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        379   380 - edge case for u1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        379   380 - edge case for u1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        380   381 - edge case for u1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        380   381 - edge case for u1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        381   382 - edge case for u1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        381   382 - edge case for u1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        382   383 - edge case for u1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        382   383 - edge case for u1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        383   384 - edge case for u1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        383   384 - edge case for u1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        384   385 - edge case for u1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        384   385 - edge case for u1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        385   386 - edge case for u1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        385   386 - edge case for u1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        386   387 - edge case for u1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        386   387 - edge case for u1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        387   388 - edge case for u1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        387   388 - edge case for u1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        388   389 - edge case for u1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        388   389 - edge case for u1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        389   390 - edge case for u1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        389   390 - edge case for u1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        390   391 - edge case for u2.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        390   391 - edge case for u2.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        391   392 - edge case for u2.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        391   392 - edge case for u2.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        392   393 - edge case for u2.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        392   393 - edge case for u2.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        393   394 - edge case for u2.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        393   394 - edge case for u2.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        394   395 - edge case for u2.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        394   395 - edge case for u2.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        395   396 - edge case for u2.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        395   396 - edge case for u2.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        396   397 - edge case for u2.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        396   397 - edge case for u2.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        397   398 - edge case for u2.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        397   398 - edge case for u2.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        398   399 - edge case for u2.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        398   399 - edge case for u2.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        399   400 - edge case for u2.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        399   400 - edge case for u2.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        400   401 - edge case for u2.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        400   401 - edge case for u2.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        401   402 - edge case for u2.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        401   402 - edge case for u2.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        402   403 - edge case for u2.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        402   403 - edge case for u2.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        403   404 - point duplication during verification.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        403   404 - point duplication during verification.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        404   405 - duplication bug.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        404   405 - duplication bug.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        405   406 - comparison with point at infinity .
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        405   406 - comparison with point at infinity .
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        406   407 - extreme value for k and edgecase s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        406   407 - extreme value for k and edgecase s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        407   408 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        407   408 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        408   409 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        408   409 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        409   410 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        409   410 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        410   411 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        410   411 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        411   412 - extreme value for k.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        411   412 - extreme value for k.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        412   413 - extreme value for k and edgecase s.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        412   413 - extreme value for k and edgecase s.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        413   414 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        413   414 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        414   415 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        414   415 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        415   416 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        415   416 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        416   417 - extreme value for k and s^-1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        416   417 - extreme value for k and s^-1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        417   418 - extreme value for k.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        417   418 - extreme value for k.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        418   419 - testing point duplication.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        418   419 - testing point duplication.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        419   420 - testing point duplication.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        419   420 - testing point duplication.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        420   421 - testing point duplication.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        420   421 - testing point duplication.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        421   422 - testing point duplication.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        421   422 - testing point duplication.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        422   423 - pseudorandom signature.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        422   423 - pseudorandom signature.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        423   424 - pseudorandom signature.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        423   424 - pseudorandom signature.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        424   425 - pseudorandom signature.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        424   425 - pseudorandom signature.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        425   426 - pseudorandom signature.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        425   426 - pseudorandom signature.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        426   427 - y-coordinate of the public key is small.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        426   427 - y-coordinate of the public key is small.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        427   428 - y-coordinate of the public key is small.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        427   428 - y-coordinate of the public key is small.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        428   429 - y-coordinate of the public key is small.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        428   429 - y-coordinate of the public key is small.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        429   430 - y-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        429   430 - y-coordinate of the public key is large.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        430   431 - y-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        430   431 - y-coordinate of the public key is large.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        431   432 - y-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        431   432 - y-coordinate of the public key is large.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        432   433 - x-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        432   433 - x-coordinate of the public key is large.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        433   434 - x-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        433   434 - x-coordinate of the public key is large.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        434   435 - x-coordinate of the public key is large.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        434   435 - x-coordinate of the public key is large.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        435   436 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        435   436 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        436   437 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        436   437 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        437   438 - y-coordinate of the public key has many trailing 0's.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        437   438 - y-coordinate of the public key has many trailing 0's.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        438   439 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        438   439 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        439   440 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        439   440 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        440   441 - y-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        440   441 - y-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        441   442 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        441   442 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        442   443 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        442   443 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        443   444 - x-coordinate of the public key has many trailing 0's.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        443   444 - x-coordinate of the public key has many trailing 0's.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        444   445 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        444   445 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        445   446 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        445   446 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        446   447 - x-coordinate of the public key has many trailing 1's.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        446   447 - x-coordinate of the public key has many trailing 1's.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        447   448 - y-coordinate of the public key is small on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        447   448 - y-coordinate of the public key is small on brainpoolP512t1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        448   449 - y-coordinate of the public key is small on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        448   449 - y-coordinate of the public key is small on brainpoolP512t1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        449   450 - y-coordinate of the public key is small on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        449   450 - y-coordinate of the public key is small on brainpoolP512t1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        450   451 - y-coordinate of the public key is large on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        450   451 - y-coordinate of the public key is large on brainpoolP512t1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        451   452 - y-coordinate of the public key is large on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        451   452 - y-coordinate of the public key is large on brainpoolP512t1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        452   453 - y-coordinate of the public key is large on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        452   453 - y-coordinate of the public key is large on brainpoolP512t1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        453   454 - x-coordinate of the public key has many trailing 1's on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        453   454 - x-coordinate of the public key has many trailing 1's on brainpoolP512t1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        454   455 - x-coordinate of the public key has many trailing 1's on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        454   455 - x-coordinate of the public key has many trailing 1's on brainpoolP512t1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        455   456 - x-coordinate of the public key has many trailing 1's on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        455   456 - x-coordinate of the public key has many trailing 1's on brainpoolP512t1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        456   457 - y-coordinate of the public key has many trailing 0's on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        456   457 - y-coordinate of the public key has many trailing 0's on brainpoolP512t1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        457   458 - y-coordinate of the public key has many trailing 0's on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        457   458 - y-coordinate of the public key has many trailing 0's on brainpoolP512t1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        458   459 - y-coordinate of the public key has many trailing 0's on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        458   459 - y-coordinate of the public key has many trailing 0's on brainpoolP512t1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        459   460 - y-coordinate of the public key has many trailing 1's on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        459   460 - y-coordinate of the public key has many trailing 1's on brainpoolP512t1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        460   461 - y-coordinate of the public key has many trailing 1's on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        460   461 - y-coordinate of the public key has many trailing 1's on brainpoolP512t1.
 ...                ECDSA BrainpoolP512r1 test vectors (SHA512)        461   462 - y-coordinate of the public key has many trailing 1's on brainpoolP512t1.
[OK]                ECDSA BrainpoolP512r1 test vectors (SHA512)        461   462 - y-coordinate of the public key has many trailing 1's on brainpoolP512t1.
The full test results are available in `/src/_build/default/tests/_build/_tests/0EE35880-B5E2-47D3-9FC2-44DD5D482F19`.
Test Successful in 9.000s. 5990 tests run.
2025-07-01 15:10.02 ---> saved as "7b84ee54f9e3d6c0c927844e1cdc8e81712d6f2fbb740251c849f1c3dbe97232"
Job succeeded
2025-07-01 15:10.13: Job succeeded